PT-2021-21377 · Unknown · Wordpress Popup
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions <= 2.0.2
Description
The issue concerns the
headline input, specifically at the &message data[16][headline] variable. This input is vulnerable, potentially allowing for exploitation.Recommendations
For WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions <= 2.0.2, consider restricting or sanitizing input for the
headline variable to minimize the risk of exploitation.Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wordpress Popup