CVE Database /
CVE-2023-27414
CVE · High
CVE-2023-27414 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.4.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-27414
|
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.4.5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 3.4.5
|
3.4.5 |
2023-03-08 |
—
|
CVE-2023-27414
The Popup Box plugin before version 3.4.5 contains a cross-site scripting vulnerability that could enable attackers to inject and execute arbitrary scripts on affected websites. A malicious actor could leverage this flaw to inject harmful code including redirects, advertisements, or other HTML content that executes for site visitors. The vulnerability has been patched in version 3.4.5 and users should upgrade to this version or later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings