5 matches found
CVE-2024-3236
The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-3236
The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting attacks...
WordPress plugin Popup Builder security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-24535
Name of the Vulnerable Software and Affected Versions Popup Builder WordPress plugin versions prior to 1.1.33 Description The issue concerns the Popup Builder WordPress plugin, where certain Notification fields are not properly sanitised and escaped. This could allow users with contributor or...
CVE-2024-3236: Improper Neutralization of Input During Web Page Generation
The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting attacks...