This page aggregates publicly disclosed CVE and security risk information related to crazy_bone_project, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2022-0385 | The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard, leading to an unauthenticated Stored Cross-Site scripting | [email protected] | 6.1 | 1.37% | 2022-02-28 | 2026-06-17 |
| CVE-2015-9430 | The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header. | [email protected] | 6.1 | 1.36% | 2019-09-25 | 2026-06-16 |