Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2024-32601
Disclosure Date: April 18, 2024 (last updated April 18, 2024)
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Popup Anything.This issue affects Popup Anything: from n/a through 2.8.
0
Attacker Value
Unknown
CVE-2022-38077
Disclosure Date: March 29, 2023 (last updated November 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin <= 2.2.1 versions.
0
Attacker Value
Unknown
CVE-2022-2115
Disclosure Date: July 25, 2022 (last updated October 07, 2023)
The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected Cross-Site Scripting
0
Attacker Value
Unknown
CVE-2021-24883
Disclosure Date: November 29, 2021 (last updated October 07, 2023)
The Popup Anything WordPress plugin before 2.0.4 does not escape the Link Text and Button Text fields of Popup, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
0
