← All advisories

Low severity3.4NVD Advisory· Published Apr 11, 2022· Updated Jun 17, 2026

CVE-2021-36910

CVE-2021-36910

Description

Authenticated (admin user role) Stored Cross-Site Scripting (XSS) in WP-Appbox (WordPress plugin) <= 4.3.20.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Wp Appbox Project/Wp Appbox
cpe:2.3:a:wp-appbox_project:wp-appbox:*:*:*:*:*:wordpress:*:*
Range: <=4.3.20
WordPress/Wp Appboxllm-fuzzy
Range: <=4.3.20
Package: https://wordpress.org/plugins/wp-appbox
Marcel Schmilgeit/WP-Appbox (WordPress plugin)v5
Range: <= 4.3.20

Patches

Vulnerability mechanics

References

2

patchstack.com/database/vulnerability/wp-appbox/wordpress-wp-appbox-plugin-4-3-20-authenticated-stored-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory
wordpress.org/plugins/wp-appbox/nvdProductThird Party Advisory

News mentions

0

No linked articles in our index yet.