WordPress Plugin Vulnerabilities
Popup Builder < 3.74 - Authenticated Reflected Cross-Site Scripting (XSS)
Description
The "All Subscribers" setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting.
Proof of Concept
Affects Plugins
Fixed in 3.74 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Nguyen Anh Tien - SunCSR (Sun* Cyber Security Research)
Submitter
Nguyen Anh Tien
Submitter website
Submitter twitter
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2021-02-02 (about 4 years ago)
Added
2021-02-02 (about 4 years ago)
Last Updated
2021-02-03 (about 4 years ago)
WPScan 