Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Essentialplugin Subscribe
Filtered by product Popup Anything
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-2115 1 Essentialplugin 1 Popup Anything 2022-07-29 N/A 6.1 MEDIUM
The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected Cross-Site Scripting
CVE-2021-24883 1 Essentialplugin 1 Popup Anything 2021-11-30 3.5 LOW 5.4 MEDIUM
The Popup Anything WordPress plugin before 2.0.4 does not escape the Link Text and Button Text fields of Popup, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks