CVE-2023-24003

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Timersys WP Popups – WordPress Popup plugin = 2.1.4.8 versions...

PT-2024-22725 · WordPress · Timersys Wp Popups

Name of the Vulnerable Software and Affected Versions: Timersys WP Popups versions n/a through 2.1.5.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject...

PT-2023-19353 · WordPress · Timersys Wp Popups

Name of the Vulnerable Software and Affected Versions: Timersys WP Popups – WordPress Popup plugin versions = 2.1.4.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or those with higher authentication level...