Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Popup box 3.8.6 Clear all filters
TI-2023-05345 CVE-2023-5809 · GHSA-5356-6vfv-g9cf

Popup box < 3.8.6 - Admin+ Stored XSS in Categories

Priority LOW 22

The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0045 Published 2023-12-04 Fixed in 3.8.6 CWE-79
TI-2023-05409 CVE-2023-5874 · GHSA-xq9v-7phc-vqjq

Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings

Priority MEDIUM 55

The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0045 Published 2023-12-04 Fixed in 3.8.6 CWE-79