Cross site scripting

2024-02-1216:15:00

PRIOn knowledge base

www.prio-n.com

wordpress

xss

vulnerability

admin privilege

unfiltered_html

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The Popup Box WordPress plugin before 20.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

References

wpscan.com/vulnerability/f296de1c-b70b-4829-aba7-4afa24f64c51/