CVE-2022-4125 — Popup Manager <= 1.6.6 - Unauthenticated Stored XSS
The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF check when creating/updating popups, and is missing sanitisation as well as escaping, which…
Published: 2022-12-19 · CVSS: Unscored
The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF check when creating/updating popups, and is missing sanitisation as well as escaping, which could allow unauthenticated attackers to create arbitrary popups and add Stored XSS payloads as well
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7