Non évaluée

Popup Maker < 1.16.11 - Contributor+ Stored Cross Site Scripting

CVE-2022-3690 Première détection SecPulse Nov 21, 2022

Description d'origine La description telle que publiée par la source (souvent en anglais).

The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks, which could be used against admins

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Faits clés

Gravité: Non évaluée
Publication: Nov 21, 2022
Première détection SecPulse: Nov 21, 2022

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:56