CVE-2022-1776

Description

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.1.8 does not sanitize and escape some campaign parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

References

https://wpscan.com/vulnerability/46ed56db-9b9d-4390-80fc-343a01fcc3c9

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3