BuddyBoss Platform 信息泄露漏洞

BuddyBoss Platform is a state-of-the-art plugin from BuddyBoss for running online communities on WordPress. BuddyBoss Platform has a security vulnerability that can be exploited by a remote attacker to obtain each user's email address...

CVE-2021-44692: Exposure of Sensitive Information to an Unauthorized Actor

BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a Unique ID for their profile. This UID is their private email address with symbols removed and periods replaced with hyphens. For example. [email protected]...

PT-2022-11826

Name of the Vulnerable Software and Affected Versions BuddyBoss Platform versions 1.8.0 and earlier Description The issue allows XSS via the Group Name or Group Description field. This can be exploited to execute malicious scripts. Recommendations For BuddyBoss Platform versions 1.8.0 and earlier...

BuddyBoss Platform 跨站脚本漏洞

BuddyBoss Platform is a state-of-the-art plugin from BuddyBoss that runs online communities on WordPress. A cross-site scripting vulnerability exists in BuddyBoss Platform that stems from BuddyBoss Platform allowing XSS via the Group Name or Group Description fields...

CVE-2021-43334: Improper Neutralization of Input During Web Page Generation

BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field...

WordPress Buddyboss Platform plugin <= 1.7.8 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered in WordPress Buddyboss Platform plugin versions = 1.7.8. Solution Update the WordPress Buddyboss Platform plugin to the latest available version at least 1.7.9...

WordPress buddyboss-media plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. buddyboss-media is a BuddyBoss Media Library plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2018-21014

The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS...

CVE-2018-21014

The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS...

Cross site scripting

The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS...

CVE-2018-21014

The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS...

CVE-2018-21014

The CVE-2018-21014 entry concerns the WordPress plugin BuddyBoss Media (plugin version up to 3.2.3). The connected sources confirm a Stored Cross‑Site Scripting (XSS) vulnerability in this plugin, which can affect WordPress sites using BuddyBoss Media. The NVD entry describes the vulnerability as...

PT-2019-10439

Name of the Vulnerable Software and Affected Versions buddyboss-media plugin versions through 3.2.3 for WordPress Description The issue is related to stored XSS in the buddyboss-media plugin for WordPress. Recommendations For versions through 3.2.3, update to a version later than 3.2.3 to resolve...

CVE-2018-21014: Improper Neutralization of Input During Web Page Generation

The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS...

WordPress BuddyBoss Media plugin <=3.2.3 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by ozzy in WordPress BuddyBoss Media plugin versions =3.2.3. Solution 1/22/2018 - no public information or changelog available, we can't confirm that vulnerability is patched...

BuddyBoss Media <= 3.2.3 - Stored XSS

The album description does not perform input / output validation. According to the researcher: No reply from vendor. Issue not patched. Vulnerability can be exploited by any user. Form not vulnerable to CSRF. PoC '"...

BuddyBoss Media <= 3.2.3 - Stored XSS

The album description does not perform input / output validation. According to the researcher: No reply from vendor. Issue not patched. Vulnerability can be exploited by any user. Form not vulnerable to CSRF. '"alert"test";...