Bug Library Project Bug Library
3 CVEs affecting Bug Library Project Bug Library. Latest disclosed: 2024-07-19. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5450 | Critical | 9.1 | 2024-07-13 | The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files |
CVE-2021-38355 | Medium | 6.1 | 2021-09-10 | The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the ~/bug-library.php file which… |
CVE-2024-5604 | Medium | 5.9 | 2024-07-19 | The Bug Library WordPress plugin before 2.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor… |