Skip to content
Sign in
6.5 Medium

CVE-2025-26882 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Popup…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Popup Builder easy-notify-lite allows Stored XSS.This issue affects Popup Builder: from n/a through <= 1.1.33.

Affected products and versions

Product Affected versions Fixed in
Popup Builder 1.1 earliest → 1.1.33 No fix stated

Other CVEs of Popup Builder

The 3 CVEs of Popup Builder →
CVE-2025-14446 The Popup Builder (Easy Notify Lite) plugin for WordPress is vulnerable to unauthorized modification of data due to a… 5.4 Medium CVE-2025-46230 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 7.5 High
Track this CVE