Non notée
CVE-2022-1894 The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high…
Description
The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltred_html is disallowed
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Popup Builder – Create highly converting, mobile friendly marketing popups. 4.1 | premières → < 4.1.11 | 4.1.11 |
Autres CVE de Popup Builder – Create highly converting, mobile friendly marketing popups.
Les 4 CVE de Popup Builder – Create highly converting, mobile friendly marketing popups. →
CVE-2022-0479
The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter…
Non notée
CVE-2022-0228
The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters…
Non notée
CVE-2021-25082
The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it…
Non notée