Unrated
The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.
CVE-2019-15120
First seen on SecPulse
References
- advisory vel.joomla.org
- advisory kunena.org
- report github.com