Lucene search
+L

4 matches found

OSV
OSV
•added 2017/03/22 5:59 p.m.•22 views

CVE-2017-5673

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject aka topic subject accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php,...

6.1CVSS6.8AI score
SaveExploits0References2
CVE
CVE
•added 2017/03/22 5:00 p.m.•66 views

CVE-2017-5673

CVE-2017-5673 pertains to the Kunena forum extension for Joomla!, where the forum message subject (topic subject) accepts JavaScript, enabling cross-site scripting (XSS). Affected are Kunena versions 5.0.2–5.0.4; six template files render the subject and can be leveraged for script injection. The...

6.1CVSS6.1AI score0.00693EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2017/03/22 5:00 p.m.•28 views

CVE-2017-5673

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject aka topic subject accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php,...

6.2AI score0.00693EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/22 12:00 a.m.•5 views

CVE-2017-5673: Improper Neutralization of Input During Web Page Generation

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject aka topic subject accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php,...

6.1CVSS5.8AI score0.00693EPSS
SaveExploits1References2
Rows per page
Query Builder