Unscored CVE-2017-2284 EUVD-2017-11467GHSA-87gg-cfw8-3g5f

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via…

Published Aug 2, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Popup Maker Product: Popup Maker

Description

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Popup Maker	Popup Maker	prior to version 1.6.5	—

References

https://plugins.trac.wordpress.org/changeset/1697216/#file3
JVN#92921024 third-party-advisory
https://wordpress.org/plugins/popup-maker/#developers
https://wpvulndb.com/vulnerabilities/8878