WordPress WP Popup Builder Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress WP Popup Builder prior to 1.2.8, which stems from parameters not being cleaned and escaped before being output back to the page. An attacker could exploit the vulnerability to launch a cross-site scripting attack.