CVE-2021-24941

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape the messageid parameter of the getmessageactionrow AJAX action before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue...

PT-2021-16378

Name of the Vulnerable Software and Affected Versions: The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin versions prior to 2.0.5 Description: The issue is related to a reflected Cross-Site Scripting problem. It occurs because the message id parameter of the get message...