Skip to content
OpenAdvisories

Archive

1 January 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2023-6000 Public exploit Scanner template

    Popup Builder < 4.2.3 - Unauthenticated Stored XSS

    The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.