Description
Auth. Stored Cross-Site Scripting (XSS) in Pop-Up Chop Chop plugin <= 2.1.7 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Chop-Chop | Pop-Up Chop Chop (WordPress plugin) | <= 2.1.7 – ≤ 2.1.7 | — |
Medium · 5.4
CVE-2022-41638
EUVD-2022-44828GHSA-x2jr-9c9v-6r8c
WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Published Oct 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack