Medium · 6.5 CVE-2023-51514 EUVD-2023-56227GHSA-g82w-9p8c-7g8q

WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)

Published Feb 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Codeboxr Product: CBX Bookmark & Favorite

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeboxr Team CBX Bookmark & Favorite allows Stored XSS.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.13.

Affected products

Vendor	Product	Affected	Fixed
Codeboxr Team	CBX Bookmark & Favorite	≤ 1.7.13	—

References

https://patchstack.com/database/vulnerability/cbxwpbookmark/wordpress-cbx-bookmark-favorite-plugin-1-7-13-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry