Description
The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.
Exploits (1)
References (3)
Core 3
Core References
Release Notes x_refsource_misc
https://www.kunena.org/blog/207-kunena-5-1-14-released
Third Party Advisory x_refsource_misc
https://vel.joomla.org/resolved/2260-kunena-5-0-x-5-1-14-xss-cross-site-scripting
Exploit, Third Party Advisory x_refsource_misc
https://github.com/h3llraiser/CVE-2019-15120
Scores
CVSS v3
5.4
EPSS
0.0104
EPSS Percentile
77.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
kunena/kunena
< 5.1.14
Published
Aug 16, 2019
Tracked Since
Feb 18, 2026