Read the docs

Codeboxr

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Codeboxr records in CISA KEV

No Codeboxr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cbx Map 2 records LOW Cbx Bookmark & Favorite 1 record LOW Cbx Currency Converter 1 record LOW Cbx Petition For Wordpress 1 record HIGH

Records

5 records

TI-2022-04014 CVE-2022-4383 · GHSA-3qpq-p293-rrm4

CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi

Priority HIGH 82

The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01048 Published 2023-01-23 No fix listed
TI-2024-14884 CVE-2024-22297 · GHSA-4vvr-gjmg-w366

WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap allows Stored XSS.This issue affects CBX Map for Google Map & OpenStre…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0031 Published 2024-01-31 No fix listed CWE-79
TI-2023-28166 CVE-2023-51514 · GHSA-g82w-9p8c-7g8q

WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeboxr Team CBX Bookmark & Favorite allows Stored XSS.This issue affects CBX Bookmark & Favorite: from n/a through 1…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00349 Published 2024-02-01 No fix listed CWE-79
Open these records in search →