Read the docs

Codeboxr

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Codeboxr records in CISA KEV

No Codeboxr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cbx Map 2 records LOW Cbx Bookmark & Favorite 1 record LOW Cbx Currency Converter 1 record LOW Cbx Petition For Wordpress 1 record HIGH

Records

1 record in Cbx Petition For Wordpress · all components

TI-2022-04014 CVE-2022-4383 · GHSA-3qpq-p293-rrm4

CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi

Priority HIGH 82

The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01048 Published 2023-01-23 No fix listed
Open these records in search →