BU
Product
Buddyboss
6
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 6Low 0
Watch
Add Buddyboss to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-32671 | 5.4 | Oct 3 | A stored XSS vulnerability has been found on BuddyBoss Platform affecting version 2.2.9 Affected: 2.2.9 |
| CVE-2023-32670 | 5.4 | Oct 3 | Cross-Site Scripting vulnerability in BuddyBoss 2.2.9 version , which could allow a local attacker with basic privileges to execute a malicious payload through the… Affected: 2.2.9 |
| CVE-2023-32669 | 5.4 | Oct 3 | Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users' albums Affected: 2.2.9 |
| CVE-2021-43334 | 5.4 | Jan 26 | BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field Affected: through 1.8.0 |
| CVE-2024-4750 | 5.3 | Jun 4 | BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment Affected: before 2.6.0 |
| CVE-2021-44692 | 5.3 | Jan 26 | BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user Affected: through 1.8.0 |
Showing 6