dontdream

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

dontdream records in CISA KEV

No dontdream vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bp Profile Search 1 record LOW Menubar 1 record LOW

Records

1 record in Bp Profile Search · all components

TI-2024-14880 CVE-2024-22293 · GHSA-6p59-4pch-3x39

WordPress BP Profile Search Plugin <= 5.5 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrea Tarantini BP Profile Search allows Reflected XSS.This issue affects BP Profile Search: from n/a through 5.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00331 Published 2024-01-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0