📦 Bluespice

by Hallowelt

🔍 What is Bluespice?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-58114

MEDIUM CVSS 4.8 Sep 19, 2025

This CVE describes an improper input validation vulnerability in BlueSpice's CognitiveProcessDesigner extension that allows cross-site scripting (XSS) attacks. Attackers can inject malicious scripts t...

CVE-2025-57880

MEDIUM CVSS 5.4 Sep 19, 2025

This CVE describes a cross-site scripting (XSS) vulnerability in BlueSpice's WhoIsOnline extension due to improper output encoding. Attackers can inject malicious scripts that execute in users' browse...

CVE-2025-46703

MEDIUM CVSS 6.4 Sep 19, 2025

This vulnerability allows attackers to inject malicious scripts into BlueSpice wiki pages through the AtMentions extension. When exploited, it enables cross-site scripting (XSS) attacks that can steal...

CVE-2025-48007

MEDIUM CVSS 6.4 Sep 19, 2025

This CVE describes an improper output encoding vulnerability in BlueSpice's Avatars extension that allows cross-site scripting (XSS) attacks. Attackers can inject malicious scripts that execute in vic...