CVE-2023-6000

CVE-2023-6000 is a significant software vulnerability found in older versions of the Popup Builder WordPress plugin, which has been exploited by the Balada Injector malware. This flaw, identified as an unpatched Cross-Site Scripting (XSS) vulnerability, allows attackers to inject malicious code into the "Custom JS or CSS" sections of vulnerable websites. With a CVSS score of 8.8, this vulnerability poses a high risk to affected systems. The Balada Injector malware campaign began exploiting this vulnerability on December 13th, targeting outdated versions of the Popup Builder plugin (versions below 4.2.3). Sucuri researchers reported in January that over 7100 WordPress sites had been infected by the Balada Injector malware due to this vulnerability. The malware's widespread impact underscores the critical need for prompt patching and updates of the Popup Builder plugin to mitigate the threat. In conclusion, CVE-2023-6000 is a severe XSS vulnerability in the Popup Builder WordPress plugin that has been widely exploited by the Balada Injector malware. As of January, thousands of WordPress sites have fallen victim to this malware due to the exploitation of this vulnerability. To prevent further infections, it is imperative that users update their Popup Builder plugins to versions beyond 4.2.3, thereby eliminating the known vulnerability.