CVE-2017-5673 - CVE House
Back to Database
Status published Medium CVE-2017-5673

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the...

Vulnerability Description

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php, crypsisb3/layouts/message/item/default.php, crypsisb3/layouts/message/item/top/default.php, and crypsisb3/layouts/message/item/bottom/default.php. This is fixed in 5.0.5.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-5673

Credits & Attribution

No credits recorded in the NVD database.

References

More from kunena

View All →
CVE-2019-15120
The Kunena extension before 5.1.14 for Joomla! allows XSS via...
Medium 5.4
CVE-2016-11020
Kunena before 5.0.4 does not restrict avatar file extensions to...
Critical 9.8
CVE-2014-9103
Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before...
Medium 4.3
CVE-2014-9102
Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6...
Medium 6.5
CVE-2012-4868
SQL injection vulnerability in news.php in the Kunena component 1.7.2...
High 7.5

Affected Vendor

Affected Software

kunena
Vulnerable Versions:
5.0.2, 5.0.3, 5.0.4

Timeline

Official Publish: March 22nd, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.