CVE-2023-4808

Affected software: WP Post Popup WordPress plugin

PT-2023-30692 · WordPress · Wp Post Popup

Name of the Vulnerable Software and Affected Versions: WP Post Popup WordPress plugin versions prior to 3.7.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed,...

WordPress WP Post Popup Plugin <= 3.7.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Post Popup Type Plugin Vulnerable versions = 3.7.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4808 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3ee14d9df6d2 Credits Abhijith A Required privileg...