Non évaluée

Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form

CVE-2022-4381 Première détection SecPulse Jan 3, 2023

Description d'origine La description telle que publiée par la source (souvent en anglais).

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Faits clés

Gravité: Non évaluée
Publication: Jan 3, 2023
Première détection SecPulse: Jan 3, 2023

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:57