medium4.8
CVE-2022-3690
The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allow users with a role as low as Contribut…
Impact
The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks, which could be used against admins
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Code-Atlantic | Popup Maker | before 1.16.11 |