Lucene search

K
nvd[email protected]NVD:CVE-2023-6591
HistoryFeb 12, 2024 - 4:15 p.m.

CVE-2023-6591

2024-02-1216:15:08
web.nvd.nist.gov
4
popup box
wordpress plugin
20.9.0
cross-site scripting
vulnerability

AI Score

5.6

Confidence

High

EPSS

0

Percentile

9.0%

The Popup Box WordPress plugin before 20.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

AI Score

5.6

Confidence

High

EPSS

0

Percentile

9.0%