← Database

CVE-2022-1894

MEDIUM CVSS: 4.8 Published: 2022-07-11 Modified: 2026-06-17

Description

The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltred_html is disallowed

Affected Platforms

Sygnoos Popup Builder

Weakness Type

CWE-79

References