PatchTheCVE: bbs-gohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-36223: Cross Site Scripting vulnerability in mlogclub bbs-go vhttps://patchthecve.com/cve/CVE-2023-36223.htmlhttps://patchthecve.com/cve/CVE-2023-36223.htmlThu, 09 Jul 2026 01:18:29 +0000MEDIUM 5.4: Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.CVE-2023-36222: Cross Site Scripting vulnerability in mlogclub bbs-go vhttps://patchthecve.com/cve/CVE-2023-36222.htmlhttps://patchthecve.com/cve/CVE-2023-36222.htmlThu, 09 Jul 2026 01:18:29 +0000MEDIUM 5.4: Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function.CVE-2021-38221: bbs-go <= 3.3.0 including Custom Edition is vulnerable to stored XSS.https://patchthecve.com/cve/CVE-2021-38221.htmlhttps://patchthecve.com/cve/CVE-2021-38221.htmlWed, 17 Jun 2026 04:01:46 +0000MEDIUM 5.4: bbs-go <= 3.3.0 including Custom Edition is vulnerable to stored XSS.