Lucene search

K
osvGoogleOSV:CVE-2016-11020
HistoryFeb 25, 2020 - 7:15 p.m.

CVE-2016-11020

2020-02-2519:15:10
Google
osv.dev
3

6.9 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.

6.9 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

Related for OSV:CVE-2016-11020