CVE-2014-9103 - CVE House
Back to Database
Status published Medium CVE-2014-9103

Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) index value of an array parameter or the filename parameter in the Content-Disposition header to the (2) file or (3) profile image upload functionality.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-9103

Credits & Attribution

No credits recorded in the NVD database.

References

More from kunena

View All →
CVE-2019-15120
The Kunena extension before 5.1.14 for Joomla! allows XSS via...
Medium 5.4
CVE-2017-5673
In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the...
Medium 6.1
CVE-2016-11020
Kunena before 5.0.4 does not restrict avatar file extensions to...
Critical 9.8
CVE-2014-9102
Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6...
Medium 6.5
CVE-2012-4868
SQL injection vulnerability in news.php in the Kunena component 1.7.2...
High 7.5

Affected Vendor

Affected Software

kunena
Vulnerable Versions:
0

Timeline

Official Publish: November 26th, 2014
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.