| Package | Affected versions | Patched versions |
|---|---|---|
| kunena | < 5.0.4 | 5.0.4 |
Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free