Lucene search
CVE-2024-22293
Improper Neutralization of Input During Web Page Generation in BP Profile Search allows Reflected XSS
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2024-22293 WordPress BP Profile Search Plugin <= 5.5 is vulnerable to Cross Site Scripting (XSS) | 31 Jan 202417:33 | – | cvelist |
 | CVE-2024-22293 | 31 Jan 202418:15 | – | nvd |
 | Cross site scripting | 31 Jan 202418:15 | – | prion |
 | WordPress BP Profile Search Plugin <= 5.5 is vulnerable to Cross Site Scripting (XSS) | 17 Jan 202400:00 | – | patchstack |
 | BP Profile Search < 5.6 - Reflected Cross-Site Scripting via BPS_FORM | 19 Jan 202400:00 | – | wpvulndb |
 | Wordfence Intelligence Weekly WordPress Vulnerability Report (January 15, 2024 to January 21, 2024) | 25 Jan 202414:37 | – | wordfence |
Node
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "bp-profile-search",
"product": "BP Profile Search",
"vendor": "Andrea Tarantini",
"versions": [
{
"changes": [
{
"at": "5.6",
"status": "unaffected"
}
],
"lessThanOrEqual": "5.5",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo31 Jan 2024 18:15Current
6.5Medium risk
Vulners AI Score6.5
CVSS36.1 - 7.1
EPSS0.0016