CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2017/03/22 5:59 p.m.•11 views

CVE-2017-5673

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject aka topic subject accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php,...

6.1CVSS6.8AI score

Exploits0References2

CVE•added 2017/03/22 5:0 p.m.•44 views

CVE-2017-5673

CVE-2017-5673 pertains to the Kunena forum extension for Joomla!, where the forum message subject (topic subject) accepts JavaScript, enabling cross-site scripting (XSS). Affected are Kunena versions 5.0.2–5.0.4; six template files render the subject and can be leveraged for script injection. The...

6.1CVSS6.1AI score0.0024EPSS

Exploits1References2Affected Software1