CVE-2023-24003

概要

参考情報

• patchstack.com/database/vulnerability/wp-popups-lite/wordpress-wp-popups-wordpress-popup-builder-plugin-2-1-4-8-cross-site-scripting-xss · Third Party Advisory

wp popups のその他の脆弱性

• CVE-2023-1905中 5.4The WP Popups WordPress plugin before 2.1.5.1 does not properly escape the href attribute of its spu-facebook-page shortcode before outputti…
• CVE-2022-4716中 5.4The WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in t…