Skip to content
Sign in
6.1 Medium

CVE-2024-1273 The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a…

Description

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
Starbox 3.5 earliest → < 3.5.0 3.5.0
starbox 3.5 earliest → < 3.5.0 3.5.0

Other CVEs of Starbox

The 3 CVEs of Starbox →
CVE-2024-8239 The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like… 5.4 Medium CVE-2024-7955 The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium
Track this CVE