cve/2023/CVE-2023-6591.md
2024-05-25 21:48:12 +02:00

748 B

CVE-2023-6591

Description

The Popup Box WordPress plugin before 20.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

POC

Reference

No PoCs from references.

Github