Read the docs

BuddyBoss

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

BuddyBoss records in CISA KEV

No BuddyBoss vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Buddyboss Platform 7 records MEDIUM Buddyboss 6 records MEDIUM Buddymoss Media 1 record LOW Buddypress Global Search 1 record LOW

Records

6 records in Buddyboss · all components

TI-2023-15946 CVE-2023-32670 · GHSA-qxv7-7h44-6g5h

BuddyBoss XSS vulnerability

Priority MEDIUM 41

Cross-Site Scripting vulnerability in BuddyBoss 2.2.9 version , which could allow a local attacker with basic privileges to execute a malicious payload through the "[name]=image.jpg" parameter, allowing to assign a persi…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00423 Published 2023-10-03 No fix listed CWE-79
TI-2023-15947 CVE-2023-32671 · GHSA-7c55-fjfv-79jq

BuddyBoss XSS vulnerability

Priority LOW 28

A stored XSS vulnerability has been found on BuddyBoss Platform affecting version 2.2.9.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00366 Published 2023-10-03 No fix listed CWE-79
TI-2023-15945 CVE-2023-32669 · GHSA-r73q-v29w-vr75

Authorization Bypass on BuddyBoss

Priority LOW 24

Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users' albums.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00358 Published 2023-10-03 No fix listed CWE-639
Open these records in search →