CVE-2022-1894

The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltredhtml is disallowed...

CVE-2022-1894

The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltredhtml is disallowed...

CVE-2022-1894 Popup Builder < 4.1.11 - Admin+ Stored Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltredhtml is disallowed...

CVE-2022-1894

The CVE-2022-1894 entry concerns the WordPress Popup Builder plugin prior to version 4.1.11. The vulnerability stems from insufficient escaping and sanitization of certain settings, enabling Stored Cross-Site Scripting (XSS) when unfiltred_html is disallowed. Affected component: Popup Builder plu...