55 matches found
CVE-2024-53741
CVE-2024-53741 concerns the WordPress plugin Simple Popup (versions
WordPress plugin Simple Popup 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Simple Popup plugin <= 4.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Simple Popup versions = 4.6...
PT-2024-39086 · Unknown · Simple Popup Plugin
Name of the Vulnerable Software and Affected Versions: The Simple Popup Plugin versions up to, and including, 4.5 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's popup shortcode, allowing authenticated attackers wi...
WordPress plugin Simple Popup 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-39626
CVE-2024-39626 affects WordPress Pretty Simple Popup Builder; Stored XSS due to Improper Neutralization of Input During Web Page Generation. Affected: plugin Pretty Simple Popup Builder
CVE-2024-39626 WordPress Pretty Simple Popup Builder plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rob @ 5 Star Plugins Pretty Simple Popup Builder pretty-simple-popup-builder allows Stored XSS.This issue affects Pretty Simple Popup Builder: from n/a through = 1.0.9...
WordPress Pretty Simple Popup Builder Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
Software Pretty Simple Popup Builder Type Plugin Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39626 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 08a58ded2e7c Credits Anugrah Gilang Ramadhan...
CVE-2024-38689
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Popup allows Stored XSS.This issue affects Simple Popup: from n/a through 4.4...
CVE-2024-38689 WordPress Simple Popup plugin <= 4.4 - Cross-Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Popup allows Stored XSS.This issue affects Simple Popup: from n/a through 4.4...
CVE-2024-38689 WordPress Simple Popup plugin <= 4.4 - Cross-Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Popup allows Stored XSS.This issue affects Simple Popup: from n/a through 4.4...
CVE-2024-38689
CVE-2024-38689 is a stored XSS in the WordPress plugin Simple Popup by Garrett Grimm, affecting the plugin version range “from n/a through 4.4.” The root cause cited is improper neutralization of input during web page generation. The connected docs reiterate the vulnerability class and affected p...
WordPress Simple Popup plugin <= 4.4 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin Simple Popup versions = 4.4...
WordPress Simple Popup Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)
Software Simple Popup Type Plugin Vulnerable versions = 4.4 Fixed in 4.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38689 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 05d8413969d2 Credits Cronus Required privilege Administrator...
CVE-2024-34797
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Benoit Mercusot Simple Popup Manager allows Stored XSS.This issue affects Simple Popup Manager: from n/a through 1.3.5...
CVE-2024-34797 WordPress Simple Popup Manager plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Benoit Mercusot Simple Popup Manager allows Stored XSS.This issue affects Simple Popup Manager: from n/a through 1.3.5...
WordPress Pretty Simple Popup Builder Plugin < 1.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Pretty Simple Popup Builder Type Plugin Vulnerable versions 1.0.7 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2d2949eccdb3 Credits Rafie Muhammad...
CVE-2023-24406
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb ur Rehman Simple PopUp plugin = 1.8.6 versions...
