4 matches found
CVE-2026-13440
The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'messagepopup' parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and...
CVE-2026-13440
The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'messagepopup' parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and...
EUVD-2026-49761
The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'messagepopup' parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and...
CVE-2026-13440
The CVE concerns StoreGrowth: Smart Sales Booster for WooCommerce (WordPress) plugin. A Stored Cross-Site Scripting vulnerability exists via the message_popup parameter in all versions up to 2.1.0, due to insufficient input sanitization and output escaping. The exploit is feasible for unauthentic...