PT-2021-20626

Name of the Vulnerable Software and Affected Versions: Simple Popup Newsletter WordPress plugin versions up to and including 1.4.7 Description: The issue is related to Reflected Cross-Site Scripting due to the use of $ SERVER'PHP SELF' in the /simple-popup-newsletter.php file, allowing attackers ...

WordPress Simple Popup Newsletter plugin <= 1.4.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Simple Popup Newsletter plugin versions = 1.4.7. Solution This plugin has been closed as of August 12, 2021 and is not available for download. This closure is temporary, pending a full review...

Simple Popup - popup.php z Parameter XSS

The Simple PopUp WordPress plugin was affected by a popup.php z Parameter XSS security vulnerability...

WordPress Simple Popup Images Cross Site Scripting Vulnerability

WordPress Simple Popup Images Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

CVE-2014-3921

Cross-site scripting XSS vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter...

CVE-2014-3921

Cross-site scripting XSS vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter...

CVE-2014-3921

The CVE-2014-3921 entry details an XSS flaw in the WordPress Simple Popup Images plugin, specifically in popup.php via the z parameter. Affected component: the popup.php handler in the Simple Popup Images plugin for WordPress. Root cause: a cross-site scripting vulnerability that allows remote at...

CVE-2014-3921: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter...

PT-2014-5607

Name of the Vulnerable Software and Affected Versions Simple Popup Images plugin for WordPress affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the z parameter in the popup.p...