Login Request a demo
BU
Product
BuddyBoss
by BuddyBoss · last CVE Jun 4, 2024
6
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 6Low 0
Severity
All severities6Critical0High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BuddyBoss to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-32671
5.4
0%
Oct 3
BuddyBoss XSS vulnerability
Affected: 2.2.9
CVE-2023-32670
5.4
0%
Oct 3
BuddyBoss XSS vulnerability
Affected: 2.2.9
CVE-2023-32669
5.4
0%
Oct 3
Authorization Bypass on BuddyBoss
Affected: 2.2.9
CVE-2021-43334
5.4
1%
Jan 26
BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field
Affected: through 1.8.0
CVE-2024-4750
5.3
0%
Jun 4
BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment
Affected: before 2.6.0
CVE-2021-44692
5.3
1%
Jan 26
BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user
Affected: through 1.8.0
Showing 6