CVE-2022-2115

Name of the Vulnerable Software and Affected Versions Popup Anything WordPress plugin versions prior to 2.1.7

Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in a frontend page.

Recommendations For versions prior to 2.1.7, update to version 2.1.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the frontend page where the parameter is outputted until the update is applied.