CVE-2023-7296 BigBlueButton <= 3.0.0-beta.4 - Authenticated (Author+) Stored Cross-Site Scripting

🗓️ 16 Oct 2024 07:50:31Reported by WordfenceType

BigBlueButton plugin for WordPress Authenticated Stored Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2023-7296	16 Oct 202408:15	–	cve
Patchstack	WordPress BigBlueButton Plugin <= 3.0.0-beta.4 is vulnerable to Cross Site Scripting (XSS)	18 Aug 202300:00	–	patchstack
Cvelist	CVE-2023-7296 BigBlueButton <= 3.0.0-beta.4 - Authenticated (Author+) Stored Cross-Site Scripting	16 Oct 202407:31	–	cvelist
NVD	CVE-2023-7296	16 Oct 202408:15	–	nvd

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/5f829d21-5347-46ec-9218-2b3cbe7d7b95
plugins	www.plugins.trac.wordpress.org/browser/bigbluebutton/trunk/public/partials/bigbluebutton-join-display.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Oct 2024 07:31Current

5.9Medium risk

Vulners AI Score5.9

CVSS36.4

EPSS0.0004

SSVC

CWE-79