Boss Media vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 20261

Newest CVEs

• CVE-2026-96554

  BuddyBoss Platform <= 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Name

  Boss Media · BuddyBoss Platform

  Medium6.4
• CVE-2024-13859

  BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function

  Boss Media · BuddyBoss Platform

  Medium6.4
• CVE-2024-13860

  BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'

  Boss Media · BuddyBoss Platform

  Medium6.4
• CVE-2024-13858

  BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'

  Boss Media · BuddyBoss Theme

  Medium6.4
• CVE-2024-13402

  BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'

  Boss Media · BuddyBoss Platform

  Medium6.4