CVE-2022-4125

MEDIO 4.3CVE-2022-4125 · Published 19/12/2022 · updated 17/06/2026

In breve

CVE-2022-4125 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda popup manager (popup manager project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.30%, superiore al 22.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
popup manager popup_manager_project	`≤ 1.6.6`	No fix yet

Description

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF check when creating/updating popups, and is missing sanitisation as well as escaping, which could allow unauthenticated attackers to create arbitrary popups and add Stored XSS payloads as well

References

wpscan.com/vulnerability/7862084a-2821-4ef1-8d01-c9c8b3f28b05 · Exploit

Altre vulnerabilità di popup manager

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free