Microsoft Edge (Chromium) < 108.0.1462.42 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 108.0.1462.42. It is, therefore, affected by multiple vulnerabilities as referenced in the December 5, 2022 advisory. - Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...

CVE-2022-44585

Cross-Site Request Forgery CSRF vulnerability in Magneticlab Sàrl Homepage Pop-up plugin = 1.2.5 versions...

WordPress Simple Image Popup Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Simple Image Popup Type Plugin Vulnerable versions = 1.3.6 Fixed in 2.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47610 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2031a6989280 Credits Mika Required...

WordPress WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups Plugin <= 2.6.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups Type Plugin Vulnerable versions = 2.6.0 Fixed in 2.6.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24006 Patch priority Low CVSS severity Low 5.9 Developer Claim...

WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software YouTube Embed, Playlist and Popup by WpDevArt Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24002 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b671b670100b...

WP Terms Popup < 2.6.1 - Admin+ Stored XSS

The plugin does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress WP Super Popup Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Super Popup Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47598 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f0d75ac88219 Credits Mika Required privilege...

The vulnerability of the “Popup Anything” plugin in the WordPress content management system allows attackers to compromise the privacy and integrity of the protected information.

The vulnerability of the “Popup Anything” plugin in the WordPress content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected...

CVE-2022-4381

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4362

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4381 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4381 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4381 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4381

CVE-2022-4381 affects the WordPress plugin Popup Maker prior to version 1.16.9. The root cause is failure to validate and escape a shortcode attribute, enabling Stored Cross-Site Scripting (XSS) where users with as low as contributor role can inject scripts. This yields potential for stored paylo...

CVE-2022-4362 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Shortcode

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4362 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Shortcode

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4362

CVE-2022-4362 affects the Popup Maker WordPress plugin prior to 1.16.9. The root cause is failure to validate and escape one shortcode attribute, enabling Stored XSS for users with as low as contributor. Impact per sources: potential Stored XSS with confidentiality/integrity impact, CVSSv3.1 base...

WordPress plugin Popup Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin Popup Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2023-14272 · WordPress · Popup Maker

Name of the Vulnerable Software and Affected Versions: Popup Maker WordPress plugin versions prior to 1.16.9 Description: The issue is related to the lack of validation and escaping of one of the shortcode attributes in the Popup Maker WordPress plugin. This could allow users with a role as low a...