mlogclub/bbs-go

mlogclub/bbs-go

GitHubGitHub
GitHubgithub.com
bbs-go.combbs-go.com
Releases88
Frequency4 weeks 1 day
Last Release
Stars3.45K
A lightweight community and Q&A platform for forums, knowledge bases, and discussions.一个轻量级社区和问答平台。
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2023-36222NVD↗
<= 3.5.55.4 MEDIUM—

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function.

CVE-2023-36223NVD↗
<= 3.5.55.4 MEDIUM—

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.

CVE-2021-38221NVD↗
<= 3.3.05.4 MEDIUM3.5 LOW

bbs-go <= 3.3.0 including Custom Edition is vulnerable to stored XSS.