Lucene search
John Jefferson LiWPEX-ID:F296DE1C-B70B-4829-ABA7-4AFA24F64C51HistoryJan 22, 2024 - 12:00 a.m.
Popup Box Pro < 20.9.0 - Admin+ Stored XSS
2024-01-2200:00:00
John Jefferson Li
42
popup box pro
admin
stored xss
custom content
exploit
blog
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Create/edit a new popup and add the following payload in the Custom Content: <script>alert(1);</script>
Save, and notice the alert box appearing when visiting the blogRelated
wpvulndb
wpvulndb
Popup Box Pro < 7.9.0 - Admin+ Stored XSS
2024-01-22 00:00:00
Popup Box Pro < 20.9.0 - Admin+ Stored XSS
2024-01-22 00:00:00
prion
prion
Cross site scripting
2024-02-12 16:15:00
vulnrichment
vulnrichment
CVE-2023-6591 Popup Box Pro < 20.9.0 - Admin+ Stored XSS
2024-02-12 16:06:00
cvelist
cvelist
CVE-2023-6591 Popup Box Pro < 20.9.0 - Admin+ Stored XSS
2024-02-12 16:06:00
cve
cve
CVE-2023-6591
2024-02-12 16:15:08
wpexploit
wpexploit
Popup Box Pro < 7.9.0 - Admin+ Stored XSS
2024-01-22 00:00:00
nvd
nvd
CVE-2023-6591
2024-02-12 16:15:08
AI Score
5.9
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPEX-ID:F296DE1C-B70B-4829-ABA7-4AFA24F64C51