Browse CVEs

MEDIUM 5.4 CVE-2025-57880 Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOnline) allows Cross-Site Scripting (XSS… Bluespice 5.1.2+ Fix from $1,6002025-09-19 MEDIUM 6.4 CVE-2025-46703 Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS). This is… Bluespice 5.1.2+ Fix from $1,6002025-09-19 MEDIUM 6.4 CVE-2025-48007 Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows Cross-Site Scripting (XSS). T… Bluespice 5.1.2+ Fix from $1,6002025-09-19 MEDIUM 5.4 CVE-2023-42431 Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile i… Bluespice 3.2.10.1 / 4.3.3+ Fix from $1,6002023-10-30 MEDIUM 5.4 CVE-2022-42001 Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject… Bluespice 4.2.1+ Fix from $1,6002022-11-15 MEDIUM 5.4 CVE-2022-42000 Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HT… Bluespice 4.2.1+ Fix from $1,6002022-11-15 MEDIUM 5.4 CVE-2022-41814 Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account and edit permissions to injec… Bluespice 4.2.1+ Fix from $1,6002022-11-15 MEDIUM 5.4 CVE-2022-41789 Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML… Bluespice 4.2.1+ Fix from $1,6002022-11-15 MEDIUM 5.4 CVE-2022-3958 Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inje… Bluespice 4.2.1+ Fix from $1,6002022-11-15 MEDIUM 6.1 CVE-2022-3895 Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS). Bluespice 3.0.5 / 4.2.1+ Fix from $1,6002022-11-15 MEDIUM 6.1 CVE-2022-2510 Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML (XSS) o… Bluespice 3.2.9+ Fix from $1,6002022-07-22 MEDIUM 6.1 CVE-2022-2511 Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page … Bluespice 4.1.3+ Fix from $1,6002022-07-22