BBS e-Theme

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

BBS e-Theme records in CISA KEV

No BBS e-Theme vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Bbs E-popup · all components

TI-2023-18343 CVE-2023-36504 · GHSA-55vx-7w9x-7vxc

MEDIUM 43

Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00482 Published 2024-06-13 No fix listed CWE-862

TI-2023-17018 CVE-2023-34174 · GHSA-g2r9-7pxp-qr7x

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BBS e-Theme BBS e-Popup plugin <= 2.4.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00374 Published 2023-08-30 No fix listed CWE-79