Description
The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltred_html is disallowed
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Popup Builder – Create highly converting, mobile friendly marketing popups. | 4.1.11 – < 4.1.11 | 4.1.11 |