Skip to content
OpenAdvisories

Product · numixtech

Sticky Popup

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2022-1750

    Sticky Popup <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Sticky Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ popup_title' parameter in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta…

    numixtech Sticky Popup Web / CMS