Cross-site Scripting Vulnerability in Astoundify WP Modal Popup by Astoundify

CVE-2025-31772

What is CVE-2025-31772?

A Cross-site Scripting (XSS) vulnerability exists within the Astoundify WP Modal Popup with Cookie Integration plugin, which allows for stored XSS attacks. This vulnerability affects versions of the plugin from its initial release up to version 2.4. When exploited, it permits attackers to inject malicious scripts, potentially compromising the security of users interacting with affected web pages. It is crucial for users of this plugin to implement immediate updates and mitigative practices to ensure the integrity of their web applications.

References