Skip to content

CVE record · 1 source

CVE-2026-96554

CVSS 6.4

The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions up to, and including, 3.6.0…

Vendor: Boss Media
Product: BuddyBoss Platform
CVSS v3.1: 6.4 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-79
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 22h ago

The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions up to, and including, 3.6.0…

The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping. This makes it…

CVSS 6.4 CVE-2026-96554 Boss Media