Lucene search
GoogleOSV:CVE-2022-1104HistoryMay 09, 2022 - 5:15 p.m.
CVE-2022-1104
2022-05-0917:15:08
Google
osv.dev
5
The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
| CPE | Name | Operator | Version |
|---|---|---|---|
| popup-maker | eq | 1.16.3 | |
| popup-maker | eq | 1.10.2 | |
| popup-maker | eq | 1.7.17 | |
| popup-maker | eq | 1.3.7 | |
| popup-maker | eq | 1.5.6 | |
| popup-maker | eq | 1.10.0 | |
| popup-maker | eq | 1.5.5 | |
| popup-maker | eq | 1.4 | |
| popup-maker | eq | 1.4.8 | |
| popup-maker | eq | 1.5.8 |
Related
wpvulndb
wpvulndb
Popup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting
2022-04-12 00:00:00
openvas
openvas
WordPress Popup Maker Plugin < 1.16.5 XSS Vulnerability
2023-02-23 00:00:00
cvelist
cvelist
CVE-2022-1104 Popup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting
2022-05-09 16:50:46
prion
prion
Cross site scripting
2022-05-09 17:15:00
cve
cve
CVE-2022-1104
2022-05-09 17:15:08
checkpoint_advisories
checkpoint_advisories
WordPress Popup Maker Plugin Cross-Site Scripting (CVE-2022-1104)
2022-11-17 00:00:00
wpexploit
wpexploit
Popup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting
2022-04-12 00:00:00
patchstack
patchstack
nvd
nvd
CVE-2022-1104
2022-05-09 17:15:08