TI-2024-09182 CVE-2024-9896 · GHSA-5ghj-4886-p5v8Cross-site scripting in spiderdevs Forumax – AI Powered Advanced Community Forum PluginPriority LOW 27The BBP Core – Expand bbPress powered forums with useful features plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versio…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00401 · Published 2024-11-02 · No fix listed CWE-79