CVE-2026-96554 | BuddyBoss Platform Plugin up to 3.6.0 on WordPress Group Name cross site scripting

October 31, 2026 Yanac

A vulnerability was found in BuddyBoss Platform Plugin up to 3.6.0 on WordPress and classified as problematic. This affects an unknown part of the component Group Name. The manipulation of the argument Group Name results in cross site scripting.

This vulnerability is reported as CVE-2026-96554. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More