3 matches found
CVE-2023-44985 WordPress BuddyMeet Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
Auth. contributo+ Stored Cross-Site Scripting XSS vulnerability in Cytech BuddyMeet plugin = 2.2.0 versions...
CVE-2023-44985 WordPress BuddyMeet Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
Auth. contributo+ Stored Cross-Site Scripting XSS vulnerability in Cytech BuddyMeet plugin = 2.2.0 versions...
BuddyMeet < 2.3.0 - Contributor+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...