Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-51534 EUVD-2023-56246GHSA-wj7p-x86m-qmwx

WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)

Published Feb 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brave Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content allows Stored XSS.This issue affects Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content: from n/a through 0.6.2.

Affected products

VendorProductAffectedFixed
Brave Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content ≤ 0.6.2 —

References