CVE-2022-4362

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4362 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Shortcode

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4362

CVE-2022-4362 affects the Popup Maker WordPress plugin prior to 1.16.9. The root cause is failure to validate and escape one shortcode attribute, enabling Stored XSS for users with as low as contributor. Impact per sources: potential Stored XSS with confidentiality/integrity impact, CVSSv3.1 base...