CVE-2022-2115

The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected Cross-Site Scripting

Score

CVSS 3.1 6.1 Medium

Status

Modified - contact@wpscan.com

Published

2022-07-25

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Popup Anything (Essentialplugin)
• Popup Anything A Marketing Popup And Lead Generation Conversions (Unknown)

References

• https://wpscan.com/vulnerability/1f0ae535-c560-4510-ae9a-059e2435ad39