Cross-site Scripting Vulnerability in Astoundify WP Modal Popup by Astoundify
CVE-2025-31772

5.9MEDIUM

Key Information:

Vendor
WordPress
Status
WP Modal Popup With Cookie Integration
Vendor
CVE Published:
1 April 2025

Summary

A Cross-site Scripting (XSS) vulnerability exists within the Astoundify WP Modal Popup with Cookie Integration plugin, which allows for stored XSS attacks. This vulnerability affects versions of the plugin from its initial release up to version 2.4. When exploited, it permits attackers to inject malicious scripts, potentially compromising the security of users interacting with affected web pages. It is crucial for users of this plugin to implement immediate updates and mitigative practices to ensure the integrity of their web applications.

Affected Version(s)

WP Modal Popup with Cookie Integration <= 2.4

References

https://patchstack.com/database/wordpress/plugin/wp-modal...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pham Van Tam (Patchstack Alliance)
.