Bluemediapl vulnerabilities
We track 1 vulnerability in Bluemediapl products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Bluemediapl vulnerabilities
- 7.2 High severity
Autopay: Improper Neutralization of Input During Web Page Generation
The Platnosci Online Blue Media (Autopay) plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.0 via the 'bm_woocommerce_css_editor_content' POST parameter. This is due to the Css_Editor::handle_save() method