CVE-2022-1894
The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltred_html is disallowed
- Score
- CVSS 3.1 4.8 Medium
- Status
- Modified - contact@wpscan.com
- Published
- 2022-07-11
- Last modified
- 2024-08-03
- Weaknesses
- CWE-79
Affected products
- Popup Builder (Sygnoos)
- Mobile Friendly Marketing Popups. (Unknown)
- Popup Builder Create Highly Converting (Unknown)
References
- https://wpscan.com/vulnerability/68af14ef-ca66-40d6-a1e5-09f74e2cd971
