CVE Database /
CVE-2023-50880
CVE · Medium
CVE-2023-50880 — BuddyPress [buddypress] < 11.3.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-50880
|
BuddyPress [buddypress] < 11.3.2 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.5
|
< 11.3.2
|
11.3.2 |
2023-12-26 |
—
|
CVE-2023-50880
BuddyPress versions before 11.3.2 contain a cross-site scripting vulnerability discovered by Rafie Muhammad that allows attackers to inject malicious scripts into websites. When visitors access an affected site, these injected scripts can execute and potentially redirect users, display unwanted advertisements, or deliver other harmful HTML content. The issue has been resolved in version 11.3.2 and users should upgrade immediately.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings