CVE-2023-46824

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin <= 1.7.14 versions.

Reserved 2023-10-27 | Published 2023-11-06 | Updated 2024-10-29 | Assigner Patchstack

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

Default status
unaffected

Any version
affected

Credits

Huynh Tien Si (Patchstack Alliance) finder

References

patchstack.com/...site-scripting-xss-vulnerability?_s_id=cve vdb-entry

cve.org (CVE-2023-46824)

nvd.nist.gov (CVE-2023-46824)

Download JSON