6.1med
CVE-2023-6000Nuclei template
Popup Builder < 4.2.3 - Unauthenticated Stored XSS
Published 2 y ago · modified 4 mo ago · JSON
CVSS
6.1
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
2.0%
percentile 81%
Public exploits
0
none known · Nuclei check
Summary
The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.
CISA SSVC assessment
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction (EPSS)
2.00% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.
Exploits and detections
- Nuclei template WordPress Popup Builder <= 4.2.3 - Unauthenticated Stored XSS · nuclei detection template
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| NVD | 3.1 | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| CNA | 3.1 | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Affected products
- Unknown Popup Builder
Classification
- Weakness
- CWE-79 Improper Neutralization of Input During Web Page Generation
References
- wpscan.com /vulnerability/cdb3a8bd-4ee0-4ce0-9029-0490273bcfc8 · exploit, vdb-entry, technical-description, x_transferred
- wpscan.com /blog/stored-xss-fixed-in-popup-builder-4-2-3/ · technical-description, x_transferred
Sources
- CVE List: CVE-2023-6000
- NVD: CVE-2023-6000
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.