Vulnerabilities (CVE)

Filtered by vendor Bbs-go Subscribe
Filtered by product Bbs-go
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-36223 1 Bbs-go 1 Bbs-go 2024-11-21 N/A 5.4 MEDIUM
Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.
CVE-2023-36222 1 Bbs-go 1 Bbs-go 2024-11-21 N/A 5.4 MEDIUM
Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function.