Approved changes feed: RSS · Atom

cpe:2.3:a:buddystream_project:buddystream:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBuddystream Project (362dff32-a167-5369-82a2-1df71d16fc92)
ProductBuddystream (25ec1aad-6f2d-5ec6-b882-7a4dbd69215b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/madgicweb/buddystream purl2cpe 2026-06-01 10:15:38.447729

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-10007 vulnerable 2026-06-08 05:00:46.843613 madgicweb BuddyStream Plugin ShareBox.php cross site scripting
LOW (3.5)
A vulnerability was found in madgicweb BuddyStream Plugin up to 3.2.7 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file ShareBox.php. The manipulation of the argument content/link/shares leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.2.8 is able to address this issue. The patch is named 7d5b9a89a27711aad76fd55ab4cc4185b545a1d0. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-221479.
Published: 2023-02-19T15:31:03.592Z
Updated: 2024-08-06T21:36:02.269Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.