cleantalk
Vulnerabilities and Security Researches

Popup Builder – Create highly converting, mobile friendly marketing popups., CVE-2023-6000

CVE, Research URL

CVE-2023-6000

Published on
Jan 01, 2024
Research Description
The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.
Affected versions
max 4.2.3.
Status
vulnerable