CVE-2023-32671

BuddyBoss XSS vulnerability

Summary

Original description

The description as published by the source.

A stored XSS vulnerability has been found on BuddyBoss Platform affecting version 2.2.9. This vulnerability allows an attacker to store a malicious javascript payload via POST request when sending an invitation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web incibe.es

Metadata

CVE: CVE-2023-32671
Published: 2023-10-03
First seen on SecPulse: 3 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-79

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago