Non notée
CVE-2021-24883 The Popup Anything WordPress plugin before 2.0.4 does not escape the Link Text and Button Text fields of Popup, which…
Description
The Popup Anything WordPress plugin before 2.0.4 does not escape the Link Text and Button Text fields of Popup, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Popup Anything – A Marketing Popup 2.0 | premières → < 2.0.4 | 2.0.4 |