Bob vulnerabilities

We track 8 vulnerabilities in Bob products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.

8vulnerabilities

0critical

8high

0exploited

7.6average CVSS score

Latest Bob vulnerabilities

7.1 High severity
Hostel: Improper Neutralization of Input During Web Page Generation
CVE-2025-66119Dec 18, 2025Bob
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through <= 1.1.5.9.
7.1 High severity
Likert Survey Master: Improper Neutralization of Input During Web Page Generation
CVE-2025-53426Oct 22, 2025Bob
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Likert Survey Master likert-survey-master allows Reflected XSS.This issue affects Likert Survey Master: from n/a through <= 0.8.0.1.
7.1 High severity
Arigato Autoresponder and Newsletter: Improper Neutralization of Input During Web Page Generation
CVE-2025-39594Apr 17, 2025Bob
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Arigato Autoresponder and Newsletter bft-autoresponder allows Reflected XSS.This issue affects Arigato Autoresponder and Newsletter: from n/a through <= 2
7.6 High severity
Hostel: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-39566Apr 16, 2025Bob
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Hostel hostel allows Blind SQL Injection.This issue affects Hostel: from n/a through <= 1.1.5.6.
7.1 High severity
Hostel: Improper Neutralization of Input During Web Page Generation
CVE-2025-30848Apr 1, 2025Bob
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through <= 1.1.5.
7.1 High severity
Hostel: Improper Neutralization of Input During Web Page Generation
CVE-2025-31102Mar 28, 2025Bob
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through <= 1.1.5.5.
8.8 High severity
Watu Quiz: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-53792Dec 2, 2024Bob
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through <= 3.4.1.2.
8.8 High severity
Namaste! LMS: Deserialization of Untrusted Data
CVE-2024-50408Oct 28, 2024Bob
Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through <= 2.6.3.