Read the docs

Bu

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Bu records in CISA KEV

No Bu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bu Section Editing 1 record MEDIUM Bu Slideshow 1 record LOW

Records

2 records

TI-2024-11808 CVE-2024-12736 · GHSA-vgr6-rw4j-x24g

BU Section Editing <= 0.9.9 - Reflected XSS

Priority MEDIUM 60

The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00347 Published 2025-01-09 No fix listed CWE-79
TI-2024-35023 CVE-2024-52351 · GHSA-67gr-vw6p-v77j

WordPress BU Slideshow plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BU Web Team BU Slideshow bu-slideshow allows Stored XSS.This issue affects BU Slideshow: from n/a through <= 2.3.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0027 Published 2024-11-11 No fix listed CWE-79
Open these records in search →