CVE-2023-44228: WordPress Onclick Show Popup Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)
Published Oct 2, 2023
·Updated
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Onclick show popup plugin <= 8.1 versions.
Affected Software
1 affected component
gopiplus Onclick Show Popup Wordpress<=8.1
Event History
Oct 2, 2023
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-44228.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Onclick show popup p…'
3
What is the affected software version?
The affected software version is <= 8.1 of the Gopi Ramasamy Onclick show popup plugin for WordPress.
4
What is the severity of CVE-2023-44228?
The severity of CVE-2023-44228 is medium with a severity value of 4.8.
5
How can I fix this vulnerability?
To fix this vulnerability, you should update the Gopi Ramasamy Onclick show popup plugin for WordPress to a version higher than 8.1.