CVE-2024-1273

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

WordPress Starbox Plugin < 3.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Starbox Type Plugin Vulnerable versions 3.5.0 Fixed in 3.5.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1273 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 23b6dbb093c5 Credits Dmitrii Ignatyev Required privileg...

CVE-2024-1273

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-1273 Starbox < 3.5.0 - Contributor+ Stored XSS

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-1273 Starbox < 3.5.0 - Contributor+ Stored XSS

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-1273

CVE-2024-1273 affects the Starbox WordPress plugin prior to 3.5.0. The issue arises from insufficient sanitization/escaping of certain parameters, allowing users with a Contributor role to perform Cross-Site Scripting (stored XSS) attacks. Affected version: