Vulnerabilities
3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2023-36223 +1 in the same advisory: …36222 | Cross Site Scripting vulnerability in mlogclub bbs-go v. Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function. NVD description · AI analysis pending | 5.4 | <1% | PoC |
| — | |
| CVE-2021-38221 | bbs-go <= 3.3.0 including Custom Edition is vulnerable to stored XSS. bbs-go <= 3.3.0 including Custom Edition is vulnerable to stored XSS. NVD description · AI analysis pending | 5.4 | <1% | PoC |
| — |