Описание
The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.
The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.
Связанные уязвимости
CVSS3: 6.1
nvd
около 2 лет назад
The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.
CVSS3: 6.1
fstec
больше 2 лет назад
Уязвимость плагина Popup Builder системы управления содержимым сайта WordPress, позволяющая нарушителю проводить межсайтовые сценарные атаки