Cross-site Scripting Vulnerability in Astoundify WP Modal Popup by Astoundify

CVE-2025-31772

What is CVE-2025-31772?

A Cross-site Scripting (XSS) vulnerability exists within the Astoundify WP Modal Popup with Cookie Integration plugin, which allows for stored XSS attacks. This vulnerability affects versions of the plugin from its initial release up to version 2.4. When exploited, it permits attackers to inject malicious scripts, potentially compromising the security of users interacting with affected web pages. It is crucial for users of this plugin to implement immediate updates and mitigative practices to ensure the integrity of their web applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References