Advisories · Technology

metabox Meta Box – A Framework for Dynamic Websites.

Every CVE that names metabox Meta Box – A Framework for Dynamic Websites among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109216 CVE record

CVSS 4.9 Medium

Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys
- metabox Meta Box – A Framework for Dynamic Websites
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026