Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can trigger Cross Site Scripting of Joomla Kunena
Forum, in order to execute JavaScript code in the context of the
web site.

Impacted products: Joomla Extensions

Severity: 2/4

Creation date: 30/07/2014

DESCRIPTION OF THE VULNERABILITY

The Kunena Forum extension can be installed on Joomla.

However, it does not filter received data before inserting them in
generated HTML documents.

An attacker can therefore trigger a Cross Site Scripting of Joomla
Kunena Forum, in order to execute JavaScript code in the context
of the web site.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Joomla-Kunena-Forum-Cross-Site-Scripting-15110