Unrated severityNVD Advisory· Published Jul 25, 2022· Updated Aug 3, 2024
Popup Anything < 2.1.7 - Reflected Cross-Site Scripting
CVE-2022-2115
Description
The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected Cross-Site Scripting
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.1.7
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/1f0ae535-c560-4510-ae9a-059e2435ad39mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.