Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Codeboxr Clear all filters
TI-2023-28166 CVE-2023-51514 · GHSA-g82w-9p8c-7g8q

WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeboxr Team CBX Bookmark & Favorite allows Stored XSS.This issue affects CBX Bookmark & Favorite: from n/a through 1…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00349 Published 2024-02-01 No fix listed CWE-79
TI-2024-14884 CVE-2024-22297 · GHSA-4vvr-gjmg-w366

WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap allows Stored XSS.This issue affects CBX Map for Google Map & OpenStre…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0031 Published 2024-01-31 No fix listed CWE-79
TI-2022-04014 CVE-2022-4383 · GHSA-3qpq-p293-rrm4

CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi

Priority HIGH 82

The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01048 Published 2023-01-23 No fix listed