Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Buying Buddy records in CISA KEVNo Buying Buddy vulnerabilities are listed in CISA KEV.
Priority MEDIUM 40
Cross-Site Request Forgery (CSRF) vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows Object Injection.This issue affects Buying Buddy IDX CRM: from n/a through <= 1.2.8.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00255 · Published 2024-11-20 · No fix listed CWE-352
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows DOM-Based XSS.This issue affects Buying Buddy IDX CRM: f…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00236 · Published 2025-06-20 · No fix listed CWE-79
