CVE-2021-43334

creationtimestamp| type| source ---|---|--- 2022-01-26 18:19:45+00:00| seen| https://t.me/cibsecurity/36317...

CVE-2021-43334

BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field...

CVE-2021-43334

CVE-2021-43334 affects BuddyBoss Platform (≤ 1.8.0) with a Cross-site Scripting (XSS) vulnerability in the Group Name/Group Description fields. The root cause is a lack of input validation in the bp_register_active_group_types function within bp-groups-functions.php, leading to script injection. ...