5.4
Medium
CVE-2022-28612 Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored…
Description
Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Muneeb's Custom Popup Builder plugin <= 1.3.1 at WordPress.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Custom Popup Builder (WordPress plugin) 1.3 | earliest → 1.3.1 | No fix stated |