Boss Media Buddyboss Platform
4 CVEs affecting Boss Media Buddyboss Platform. Latest disclosed: 2025-05-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13860 | Medium | 6.4 | 2025-05-02 | The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bbp_topic_title’ parameter in all versions up to, and includi… |
CVE-2024-13859 | Medium | 6.4 | 2025-05-02 | The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bp_nouveau_ajax_media_save’ function in all versions up to, a… |
CVE-2024-13858 | Medium | 6.4 | 2025-05-02 | The BuddyBoss Platform plugin and BuddyBoss Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘invitee_name’ parameter in all versions u… |
CVE-2024-13402 | Medium | 6.4 | 2025-02-27 | The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link_title’ parameter in all versions up to, and including, 2… |