PT-2017-16663 · Joomla · Kunena

Published 2017-03-22 · Updated 2017-11-15 · CVE-2017-5673

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kunena extension versions 5.0.2 through 5.0.4

Description The issue allows for the execution of JavaScript in the forum message subject, leading to a cross-site scripting (XSS) issue. This is due to the acceptance of JavaScript in the topic subject. Six specific files are affected by this issue.

Recommendations For Kunena extension versions 5.0.2 through 5.0.4, update to version 5.0.5 to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-5673

Affected Products

Kunena

References · 4

• 🔥 http://fox.ra.it/technical-articles/kunena-vulnerability-2017-01.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-5673 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5673 · Security Note
• http://securityfocus.com/bid/101677 · Note