Crazy Bone Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Crazy Bone Project records in CISA KEV

No Crazy Bone Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crazy Bone 2 records LOW

Records

2 records in Crazy Bone · all components

TI-2022-00310 CVE-2022-0385 · GHSA-h6jw-5483-m266

Crazy Bone <= 0.6.0 - Unauthenticated Stored XSS

LOW 30

The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard, leading to an unauthenticated Stored Cross-Site scripti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01396 Published 2022-02-28 No fix listed CWE-79

TI-2015-07807 CVE-2015-9430 · GHSA-5j7c-4mf2-vr4c

The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.

LOW 30

The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01365 Published 2019-09-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0