Login Request a demo
BP
Product
BuddyBoss Platform
by Boss Media · last CVE May 2, 2025
4
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities4Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BuddyBoss Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-13859
5.4
0%
May 2
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function
Affected: through 2.8.50
CVE-2024-13860
5.4
0%
May 2
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'
Affected: through 2.8.50
CVE-2024-13858
5.4
0%
May 2
BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'
Affected: through 2.8.50
CVE-2024-13402
5.4
0%
Feb 27
BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'
Affected: through 2.7.70
Showing 4