Description
Authenticated (admin user role) Stored Cross-Site Scripting (XSS) in WP-Appbox (WordPress plugin) <= 4.3.20.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Marcel Schmilgeit | WP-Appbox (WordPress plugin) | <= 4.3.20 – ≤ 4.3.20 | — |
Low · 3.4
CVE-2021-36910
EUVD-2021-23486GHSA-pjwx-cx4r-wmqw
WordPress WP-Appbox plugin <= 4.3.20 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Apr 11, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack