← Database

CVE-2022-28612

MEDIUM CVSS: 5.4 Published: 2022-06-15 Modified: 2026-06-17

Description

Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Muneeb's Custom Popup Builder plugin <= 1.3.1 at WordPress.

Affected Platforms

Custom Popup Builder Project Custom Popup Builder

Weakness Type

CWE-79, CWE-284, NVD-CWE-Other

References