CVE-2022-1104

creationtimestamp| type| source ---|---|--- 2022-05-09 20:36:27+00:00| seen| https://t.me/cibsecurity/42181...

CVE-2022-1104

CVE-2022-1104 affects the WordPress Popup Maker plugin (pre-1.16.5). The vulnerability arises from insufficient sanitisation/escaping of certain Popup settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. Connected advisorie...