Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

bannersky — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting bannersky. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Bannersky is a network device management solution primarily used for monitoring and controlling network infrastructure. Historically, it has been associated with multiple critical vulnerabilities including remote code execution, cross-site scripting, and privilege escalation flaws. The product has accumulated 8 CVEs to date, with several instances allowing unauthorized access or system compromise. Notable security characteristics include its exposure to web-based attacks due to insufficient input validation and authentication bypass issues. While no major public incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks in production environments requiring strict access controls and timely patching.

CVE ID Title CVSS Severity Published
CVE-2026-108498 WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerability — BSK PDF Manager CWE-79 7.1 High 2026-10-15
CVE-2026-65528 WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability — BSK PDF Manager CWE-79 6.5 Medium 2026-07-23
CVE-2026-39686 WordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerability — BSK PDF Manager CWE-497 5.3 Medium 2026-04-08
CVE-2025-4970 BSK PDF Manager <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload — BSK PDF Manager CWE-79 5.5 Medium 2025-12-12
CVE-2025-24545 WordPress BSK Forms Validation plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability — BSK Forms Validation CWE-79 7.1 High 2025-02-03
CVE-2025-22347 WordPress BSK Forms Blacklist plugin <= 3.9 - CSRF to SQL Injection vulnerability — BSK Forms Blacklist CWE-352 8.2 High 2025-01-07
CVE-2024-47624 WordPress BSK Forms Blacklist plugin <= 3.8.1 - Reflected Cross Site Scripting (XSS) vulnerability — BSK Forms Blacklist CWE-79 7.1 High 2024-10-05
CVE-2024-43233 WordPress BSK Forms Blacklist plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability — BSK Forms Blacklist CWE-79 7.1 High 2024-08-12
CVE-2023-30872 WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection — BSK Forms Blacklist CWE-89 7.6 High 2023-12-20
CVE-2023-5110 BSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — BSK PDF Manager CWE-79 6.4 Medium 2023-10-24

This page lists every published CVE security advisory associated with bannersky. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.