CVE-2026-123472

MITTEL 6.5CVE-2026-123472 · Published 07/11/2026 · updated 07/11/2026

Kurz gesagt

CVE-2026-123472 ist eine Schwachstelle (MITTEL (CVSS 6.5)).
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Stored XSS.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.3.

References

patchstack.com/database/wordpress/plugin/meta-box/vulnerability/wordpress-meta-box-wordpress-custom-fields-framework-plugin-5-15-3-cross-site-scripting-xss-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free