Read the docs

nova706

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

nova706 records in CISA KEV

No nova706 vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-17567 CVE-2025-23800 · GHSA-4hgm-4hwj-vrf5

WordPress OrangeBox plugin <= 3.0.0 - CSRF to Stored XSS vulnerability

Priority LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in nova706 OrangeBox orangebox allows Cross Site Request Forgery.This issue affects OrangeBox: from n/a through <= 3.0.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-01-16 No fix listed CWE-352
Open these records in search →