VYPR
Medium severity5.4NVD Advisory· Published Sep 30, 2024· Updated Jun 17, 2026

CVE-2024-8239

CVE-2024-8239

Description

The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user's profile or pages where the starbox shortcode is used, which may be abused by users with at least the contributor role to conduct Stored XSS attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • cpe:2.3:a:squirrly:starbox:*:*:*:*:*:wordpress:*:*
    Range: <3.5.3
  • WordPress/Starboxllm-fuzzy2 versions
    <3.5.3+ 1 more
    • (no CPE)range: <3.5.3
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.