Vulnerabilities

TI-2024-15037 CVE-2024-22490 · GHSA-v9wr-2xrg-v7w8

Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run…

MEDIUM 60

Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00435 Published 2024-01-23 No fix listed CWE-79

TI-2024-15038 CVE-2024-22491 · GHSA-32q4-86g8-6637

MEDIUM 58

A Stored Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00417 Published 2024-01-16 No fix listed CWE-79

TI-2022-03980 CVE-2022-4347 · GHSA-xx93-36xf-3332

MEDIUM 58

A vulnerability was found in xiandafu beetl-bbs.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00416 Published 2022-12-08 No fix listed CWE-707