PT-2023-17329 · WordPress · Wp Popups
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
WP Popups WordPress plugin versions prior to 2.1.5.1
Description
The issue arises from insufficient escaping of the
href attribute in the spu-facebook-page shortcode, potentially allowing Stored Cross-Site Scripting attacks by users with the contributor role and above.Recommendations
For WP Popups WordPress plugin versions prior to 2.1.5.1, update to version 2.1.5.1 or later to resolve the issue.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Wp Popups