Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Popup Maker 1.16.9 Clear all filters
TI-2022-04012 CVE-2022-4381 · GHSA-897f-p6v4-v4qv

Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form

Priority MEDIUM 58

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0056 Published 2023-01-02 Fixed in 1.16.9
TI-2022-03995 CVE-2022-4362 · GHSA-jwf2-6pcx-2939

Popup Maker < 1.16.9 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0059 Published 2023-01-02 Fixed in 1.16.9