Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2024-22490
Disclosure Date: January 23, 2024 (last updated January 30, 2024)
Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter.
0
Attacker Value
Unknown
CVE-2024-22491
Disclosure Date: January 16, 2024 (last updated January 24, 2024)
A Stored Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter.
0
Attacker Value
Unknown
CVE-2023-30331
Disclosure Date: May 04, 2023 (last updated October 08, 2023)
An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.
0
Attacker Value
Unknown
CVE-2022-4347
Disclosure Date: December 08, 2022 (last updated February 24, 2025)
A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215107.
0
