Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Bluespice MEDIUM 5.4
CVE-2025-57880

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOnline) allows Cross-Site Scripting (XSS…

Fix: 5.1.2+
Fix from $1,600 2025-09-19
Bluespice MEDIUM 6.4
CVE-2025-46703

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS). This is…

Fix: 5.1.2+
Fix from $1,600 2025-09-19
Bluespice MEDIUM 6.4
CVE-2025-48007

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows Cross-Site Scripting (XSS). T…

Fix: 5.1.2+
Fix from $1,600 2025-09-19
Bluespice MEDIUM 5.4
CVE-2023-42431

Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile i…

Fix: 3.2.10.1 / 4.3.3+
Fix from $1,600 2023-10-30
Bluespice MEDIUM 5.4
CVE-2022-42001

Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject…

Fix: 4.2.1+
Fix from $1,600 2022-11-15
Bluespice MEDIUM 5.4
CVE-2022-42000

Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HT…

Fix: 4.2.1+
Fix from $1,600 2022-11-15
Bluespice MEDIUM 5.4
CVE-2022-41814

Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account and edit permissions to injec…

Fix: 4.2.1+
Fix from $1,600 2022-11-15
Bluespice MEDIUM 5.4
CVE-2022-41789

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML…

Fix: 4.2.1+
Fix from $1,600 2022-11-15
Bluespice MEDIUM 5.4
CVE-2022-3958

Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inje…

Fix: 4.2.1+
Fix from $1,600 2022-11-15
Bluespice MEDIUM 6.1
CVE-2022-3895

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).

Fix: 3.0.5 / 4.2.1+
Fix from $1,600 2022-11-15
Bluespice MEDIUM 6.1
CVE-2022-2510

Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML (XSS) o…

Fix: 3.2.9+
Fix from $1,600 2022-07-22
Bluespice MEDIUM 6.1
CVE-2022-2511

Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page …

Fix: 4.1.3+
Fix from $1,600 2022-07-22