CVE-2023-23980: WordPress MailOptin Plugin <= 1.2.54.0 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MailOptin Popup Builder Team MailOptin plugin <= 1.2.54.0 versions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-23980?
CVE-2023-23980 is classified as a high-severity vulnerability due to its potential for exploitation through stored cross-site scripting (XSS).
How do I fix CVE-2023-23980?
To fix CVE-2023-23980, update the MailOptin plugin to version 1.2.54.1 or later to mitigate the stored XSS vulnerability.
Who is affected by CVE-2023-23980?
CVE-2023-23980 affects users of the MailOptin plugin for WordPress versions 1.2.54.0 or earlier.
What type of vulnerability is CVE-2023-23980?
CVE-2023-23980 is a stored cross-site scripting (XSS) vulnerability that allows an authenticated administrator to execute arbitrary scripts.
Is CVE-2023-23980 easy to exploit?
Yes, CVE-2023-23980 can be exploited easily by an authenticated attacker with admin privileges to inject malicious scripts.