Popup Builder@* Security Vulnerabilities and Issues — Popup Builder@* CVE List

Lucene search

GhozylabPopup Builder*

3 matches found

CVE•added 2024/06/17 6:15 a.m.•62 views

CVE-2024-3236

The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting attacks.

5.4CVSS5.4AI score0.00128EPSS

CVE•added 2025/02/25 3:15 p.m.•47 views

CVE-2025-26882

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Popup Builder allows Stored XSS. This issue affects Popup Builder: from n/a through 1.1.33.

6.5CVSS6.8AI score0.00034EPSS

CVE•added 2025/04/24 4:15 p.m.•40 views

CVE-2025-46230

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GhozyLab Popup Builder allows PHP Local File Inclusion. This issue affects Popup Builder: from n/a through 1.1.35.

7.5CVSS7.1AI score0.0017EPSS