Please send a email to: security@kunena.org with a example or POC.

We will send you a email within 24 hours. After the confirmation we will work on the fix asap.

Sorry, we have no bug bounty rewards for the reports. All our donations are going to the server costs. But you name will be added to the version doc.