medium6.1
CVE-2022-2404
The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross…
Impact
The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Themehunk | Wp Popup Builder | before 1.2.9 |