Skip to content
OpenAdvisories

Product · WordPress

Buddypress

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2020-37233

    WordPress Plugin Buddypress 6.2.0 Persistent Cross-Site Scripting

    WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject malicious script code through the figure parameter in wp:html blocks. Attackers can inject ifram…

    WordPress Buddypress Web / CMS