cve/2023/CVE-2023-6591.md
2024-05-28 08:49:17 +00:00

796 B

CVE-2023-6591

Description

The Popup Box WordPress plugin before 20.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

POC

Reference

Github