CVE-2021-36910: Wp-Appbox Project Wp-Appbox

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated (admin user role) Stored Cross-Site Scripting (XSS) in WP-Appbox (WordPress plugin) <= 4.3.20.

Affected products

• Wp-Appbox Project Wp-Appbox: up to and including 4.3.20

Published 2022-04-11. Last modified 2026-06-17.