CVE-2023-4390

Summary

CVE-2023-4390 is a vulnerability affecting the Popup box WordPress plugin before version 3.7.2. This issue allows high-privilege users, including administrators, to inject arbitrary web scripts into Popup fields. The plugin fails to sanitize and escape these fields, which can pose a significant security risk, especially in multisite setups where the unfiltered_html capability is disallowed. Successful exploitation of this vulnerability could lead to the execution of malicious scripts and potential data breaches. It's crucial for users to update their plugins to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.