Crazy Bone Project Crazy Bone
2 CVEs affecting Crazy Bone Project Crazy Bone. Latest disclosed: 2022-02-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0385 | Medium | 6.1 | 2022-02-28 | The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashb… |
CVE-2015-9430 | Medium | 6.1 | 2019-09-26 | The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header. |