A stored cross-site scripting (XSS) vulnerability exists in the text sharing feature of FileCodeBox version 2.2 and earlier. This flaw allows attackers to inject arbitrary JavaScript code into shared text codeboxes. When users access the infected codebox via a link or share code, the malicious script executes automatically in their browsers.