CVE-2026-123472
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Stored XSS.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.3.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| eLightUp | Meta Box – WordPress Custom Fields Framework | ≤5.15.3 |
References
External links from the record. They lead to third-party sites.