Skip to content
Sign in
4.8 Medium

CVE-2023-5343 The Popup box WordPress plugin before 3.7.9 does not sanitise and escape some of its settings, which could allow high…

Description

The Popup box WordPress plugin before 3.7.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Affected products and versions

Product Affected versions Fixed in
popup_box 3.79 earliest → < 3.79 3.79
Popup Box 3.7 earliest → < 3.7.9 3.7.9

Other CVEs of popup_box

The 3 CVEs of popup_box →
CVE-2024-10861 The Popup Box – Create Countdown, Coupon, Video, Contact Form Popups plugin for WordPress is vulnerable to… 5.3 Medium CVE-2024-3897 The Popup Box – Best WordPress Popup Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a… 5.3 Medium
Track this CVE