Description
The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Popup by Supsystic | < 1.10.19 | 1.10.19 |
References
- https://wpscan.com/vulnerability/545007fc-3173-47b1-82c4-ed3fd1247b9c exploit vdb-entry technical-description