Vulnerabilities and security researches forai-moderator-for-buddypress-and-buddyboss ai-moderator-for-buddypress-and-buddyboss

Jun 07, 2024

CVE, Research URL: c5199662169f8022d0a0bdb6a709c2dd4e56fd11
Home page URL: Security reports for AI Moderator for BuddyPress
Application: AI Moderator for BuddyPress
Date: Jul 18, 2023
Research Description: AI Moderator for BuddyPress [ai-moderator-for-buddypress-and-buddyboss] <= 1.0 (unfixed) WordPress AI Moderator for BuddyPress Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) No patched version available. Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress AI Moderator for BuddyPress Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.
Affected versions: max 1.0.
Status: vulnerable