CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects WordPress, Java.
CVE
CVE-2023-6000
Severity
MEDIUM
CVSS
6.1
EPSS
2.00%
WordPress Java
Original NVD Description
The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)