BM
Vendor
Boss Media
5
CVEs
0
On KEV
0
New 30D
Products
BP5.4
BuddyBoss Platform
Boss Media
4 CVEs0 on KEV0 new
BT5.4
BuddyBoss Theme
Boss Media
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-13859 | BP BuddyBoss Platform Boss Media | 5.4 | May 2 | BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function |
| CVE-2024-13860 | BP BuddyBoss Platform Boss Media | 5.4 | May 2 | BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title' |
| CVE-2024-13858 | BT BuddyBoss Theme Boss Media | 5.4 | May 2 | BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name' |
| CVE-2024-13402 | BP BuddyBoss Platform Boss Media | 5.4 | Feb 27 | BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title' |
