<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: boss-media-buddyboss-platform</title><description>Every new CVE for boss-media-buddyboss-platform.</description><link>https://agentprime.io/</link><item><title>CVE-2026-96554: BuddyBoss Platform &lt;= 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Name</title><link>https://agentprime.io/advisories/CVE-2026-96554/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96554/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 31 Oct 2026 09:29:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13859: BuddyBoss Platform &lt;= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via &apos;bp_nouveau_ajax_media_save&apos; function</title><link>https://agentprime.io/advisories/CVE-2024-13859/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13859/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 May 2025 06:41:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13860: BuddyBoss Platform &lt;= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via &apos;bbp_topic_title&apos;</title><link>https://agentprime.io/advisories/CVE-2024-13860/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13860/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 May 2025 06:41:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13858: BuddyBoss Platform and BuddyBoss Theme &lt;= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via &apos;invitee_name&apos;</title><link>https://agentprime.io/advisories/CVE-2024-13858/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13858/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 May 2025 06:41:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13402: BuddyBoss Platform &lt;= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via &apos;link_title&apos;</title><link>https://agentprime.io/advisories/CVE-2024-13402/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13402/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Feb 2025 12:47:01 GMT</pubDate><category>CVE</category></item></channel></rss>