CVE-2023-4961

CVE-2023-4961 describes a Stored XSS in the WordPress plugin “Poptin” via the shortcodes shortcode_poptin-form for versions up to and including 1.3. The issue arises from insufficient input sanitization and output escaping on user-supplied attributes, enabling authenticated attackers with contrib...