VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 11, 2024· Updated Jun 17, 2026

CVE-2024-1273

CVE-2024-1273

Description

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Squirrly/Starbox
    cpe:2.3:a:squirrly:starbox:*:*:*:*:*:wordpress:*:*
    Range: <3.5.0
  • WordPress/Starboxcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <3.5.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.