CVE-2024-22491

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

CVE-2024-22491

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

PT-2024-19448 · Beetl-Bbs · Beetl-Bbs

Name of the Vulnerable Software and Affected Versions: beetl-bbs version 2.0 Description: A Stored Cross Site Scripting XSS vulnerability allows attackers to run arbitrary code via the "post/save" content parameter. This issue enables attackers to execute code on the affected system...

beetl-bbs Security Vulnerabilities

beetl-bbs is a forum system by xiandafu's personal developer. A security vulnerability exists in version 2.0 of beetl-bbs, which stems from a stored cross-site scripting XSS vulnerability in the post/save content parameter...

CVE-2024-22491

The CVE-2024-22491 entry concerns beetl-bbs 2.0 with a Stored Cross-Site Scripting (XSS) vulnerability in the post/save content parameter. The underlying impact is described as attackers being able to run arbitrary code, with a CVSS v3.1 base score of 5.4 (Medium) and user interaction required. T...

CVE-2023-34174

Unauth. Reflected Cross-Site Scripting XSS vulnerability in BBS e-Theme BBS e-Popup plugin = 2.4.5 versions...

CVE-2023-34174

Unauth. Reflected Cross-Site Scripting XSS vulnerability in BBS e-Theme BBS e-Popup plugin = 2.4.5 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in BBS e-Theme BBS e-Popup plugin = 2.4.5 versions...

CVE-2023-34174 WordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in BBS e-Theme BBS e-Popup plugin = 2.4.5 versions...

CVE-2023-34174

CVE-2023-34174: Unauthenticated Reflected XSS in WordPress plugin BBS e-Popup (BBS e-Theme)

WordPress plugin bbs-e-popup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-24712 · Unknown · Bbs E-Popup

Name of the Vulnerable Software and Affected Versions: BBS e-Theme BBS e-Popup plugin versions = 2.4.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36222

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function...

Cross site scripting

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36222

CVE-2023-36222 (mlogclub/bbs-go) is a Cross Site Scripting vulnerability affecting v3.5.5 and earlier. The issue arises in the comment parameter of the article function, where crafted input can be echoed to the front end, allowing a remote attacker to execute arbitrary code via XSS. Several conne...

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36223

CVE-2023-36223 is a Cross Site Scripting (XSS) vulnerability in mlogclub/bbs-go prior to 3.5.5. The root cause is improper escaping in the announcements parameter within the settings function, allowing a remote attacker to inject and execute script code in a victim’s browser. Multiple connected s...

bbs-go 跨站脚本漏洞

bbs-go is an open source community system built using the Go language by mlogclub open source. A cross-site scripting vulnerability exists in mlogclub bbs-go v. 3.5.5, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload on the comment...