CVE-2022-1894
11.07.2022, 13:15
The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltred_html is disallowed
Vendor | Product | Version |
---|---|---|
sygnoos | popup_builder | 𝑥 < 4.1.11 |
𝑥
= Vulnerable software versions