Read the docs

Bu

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Bu records in CISA KEV

No Bu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bu Section Editing 1 record MEDIUM Bu Slideshow 1 record LOW

Records

1 record in Bu Section Editing · all components

TI-2024-11808 CVE-2024-12736 · GHSA-vgr6-rw4j-x24g

BU Section Editing <= 0.9.9 - Reflected XSS

Priority MEDIUM 60

The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00347 Published 2025-01-09 No fix listed CWE-79
Open these records in search →