← All advisories

Medium severity5.4NVD Advisory· Published Aug 16, 2019· Updated Jun 17, 2026

CVE-2019-15120

CVE-2019-15120

Description

The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Kunena/Kunena2 versions
cpe:2.3:a:kunena:kunena:*:*:*:*:*:joomla\!:*:*+ 1 more
- cpe:2.3:a:kunena:kunena:*:*:*:*:*:joomla\!:*:*range: <5.1.14
- (no CPE)range: <5.1.14
Joomla!/Kunena extensiondescription
Joomla/Kunenallm-create
Range: <5.1.14

Patches

Vulnerability mechanics

References

2

vel.joomla.org/resolved/2260-kunena-5-0-x-5-1-14-xss-cross-site-scriptingnvdThird Party Advisory
www.kunena.org/blog/207-kunena-5-1-14-releasednvdRelease Notes

News mentions

0

No linked articles in our index yet.