cleantalk
Vulnerabilities and Security Researches

BBCode Deluxe, CVE-2025-46479

CVE, Research URL

CVE-2025-46479

Home page URL

Security reports for BBCode Deluxe

Application

BBCode Deluxe

Published on
Apr 24, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevynCJohnson BBCode Deluxe allows DOM-Based XSS. This issue affects BBCode Deluxe: from n/a through 2020.08.01.2.
Affected versions
Min -, max 2020.08.01.2.
Status
vulnerable
Previous vulnerability researches
WP ULike – Most Advanced WordPress Marketing Toolkit (CVE-2023-45640) , Jun 07, 2024
WP ULike – Most Advanced WordPress Marketing Toolkit (CVE-2024-9649) , Oct 17, 2024
WP ULike – Most Advanced WordPress Marketing Toolkit (CVE-2018-1000508) , Jun 07, 2024
WP ULike – Most Advanced WordPress Marketing Toolkit (CVE-2018-1000511) , Jun 07, 2024
WP ULike – Most Advanced WordPress Marketing Toolkit (CVE-2022-45842) , Jun 07, 2024
New vulnerability
Control Listings – Classifieds Ads Directory Portal Manager (CVE-2025-46234) , Apr 26, 2025
WordPress Tooltip (CVE-2025-46532) , Apr 26, 2025
Business Contact Widget (CVE-2025-46529) , Apr 26, 2025
Drop Caps (CVE-2025-46495) , Apr 26, 2025
WpZon – Amazon Affiliate Plugin (CVE-2025-46506) , Apr 26, 2025