VYPR
Unrated severityNVD Advisory· Published Nov 20, 2023· Updated Sep 9, 2024

Popup Box < 3.7.9 - Admin+ Stored XSS

CVE-2023-5343

Description

The Popup box WordPress plugin before 3.7.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.