CVE-2022-1104
09.05.2022, 17:15
The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
| Vendor | Product | Version |
|---|---|---|
| code-atlantic | popup_maker | 𝑥 < 1.16.5 |
𝑥
= Vulnerable software versions