CVE-2022-1776
The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.1.8 does not sanitize and escape some campaign parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
- Score
- CVSS 3.1 5.4 Medium
- Status
- Modified - contact@wpscan.com
- Published
- 2022-06-27
- Last modified
- 2024-08-03
- Weaknesses
- CWE-79
Affected products
- Popups, Welcome Bar, Optins And Lead Generation Plugin (Icegram)
- Optins And Lead Generation Plugin Icegram (Unknown)
- Popups (Unknown)
- Welcome Bar (Unknown)
References
- https://wpscan.com/vulnerability/46ed56db-9b9d-4390-80fc-343a01fcc3c9
