Kunena 7.0.11 & Kunena 6.4.16 – Security Updates Released and K7.1 in RC1 2

The Kunena team has announce the arrival of three simultaneous security release : K6.4.16, K7.0.11 and K7.1 RC2. Just a reminder K6.4.16 receives only securities fixes untill end of 2026, so it's advised for users to upgrade to K7.0.11. K7.0.11 is the last release of the K7.0 because it's replaced by K7.1 branch with the stable release in the corner. The translations for K7.1 on crowdin.com/project/kunena-forum-7-1 needs to be checked or improved becasue it has been generated by TM (Translation Machine).

Question Kunena 5.1.14 Released - Security update

More
7 years 2 months ago #211012 by 810
Kunena 5.1.14 Released - Security update was created by 810
The key distinctions of K 5.1.14 are:

1 Security fix -...

Introduction

The Kunena team is proud to announce the arrival of Kunena 5.1.14 [K5.1.14] which is now available for download as a native Joomla extension for Joomla 3.9.x. This version addresses most of the issues that were discovered in K 5.1 and issues discovered during the development stages of K 5.1.14. This update fixed 1 security issue.

We have Released K5.1.14 because of a 1 High Security issue

1 New feature to turn off "Re:" on subject names.

Read more...

Please Log in or Create an account to join the conversation.

More
7 years 1 month ago #211132 by reufelss
Replied by reufelss on topic Kunena 5.1.14 Released - Security update
Sorry but Iám new hier.

We have the cross site scripting problem. By abusing the vulnerability an attacker can store JavaScript in the database, which is stored in the title of the answer he or she wrote. The now stored XSS is executed every time a user enters the affected topic in the forum, which could therefore be triggered by any user of the system. Note that the XSS gets only executed if it is the latest answer of the topic.

Can you help us?

Attachment not found


Attachment not found

Please Log in or Create an account to join the conversation.

More
7 years 1 month ago #211139 by 810
Replied by 810 on topic Kunena 5.1.14 Released - Security update
You should install the update, then the problem should be solved. If you run any issue, then please try the nightly build, its on our download page, on the bottom.

Please Log in or Create an account to join the conversation.

More
7 years 1 month ago #211153 by reufelss
Replied by reufelss on topic Kunena 5.1.14 Released - Security update
I have installed the update. Our Version is 5.1.14

Please Log in or Create an account to join the conversation.

More
7 years 1 month ago - 7 years 1 month ago #211154 by reufelss
Replied by reufelss on topic Kunena 5.1.14 Released - Security update
Hello, we have just installed version 5.1.15 DEV. Unfortunately, Java scripts, e.g. when replying to posts, can be execute in the header.
We testet it with the script "><script>alert(1)</script>
Last edit: 7 years 1 month ago by reufelss.

Please Log in or Create an account to join the conversation.

More
7 years 1 month ago #211168 by rich
Replied by rich on topic Kunena 5.1.14 Released - Security update
Please use the correct category for your problem. This category here is for official announcements and not for troubleshooting.
Important! Always create a backup before you make any changes to your website!

Please Log in or Create an account to join the conversation.

Time to create page: 0.137 seconds