Lucene search
WpvulndbWPVDB-ID:C05A91E0-1DC4-4970-A964-1AD47794205BHistoryAug 13, 2021 - 12:00 a.m.
Simple Popup Newsletter <= 1.4.7 - Reflected Cross-Site Scripting
2021-08-1300:00:00
wpscan.com
13
popup newsletter
vulnerable
cross-site scripting
php_self
arbitrary web scripts
EPSS
0.001
Percentile
31.9%
The plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER[‘PHP_SELF’] in the ~/simple-popup-newsletter.php file which allows attackers to inject arbitrary web scripts
Related
cvelist
cvelist
nvd
nvd
CVE-2021-34658
2021-08-16 19:15:15
cve
cve
CVE-2021-34658
2021-08-16 19:15:15
prion
prion
Cross site scripting
2021-08-16 19:15:00