PT-2023-10274 · WordPress · Woo-Popup
CVE-2015-10095
·
Published
2023-03-06
·
Updated
2024-05-17
CVSS v2.0
4.0
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
woo-popup Plugin versions up to 1.2.2
Description
A problematic vulnerability has been found in the woo-popup Plugin on WordPress, affecting an unknown part of the file
admin/class-woo-popup-admin.php. This issue leads to cross-site scripting and can be initiated remotely.Recommendations
For versions up to 1.2.2, upgrade to version 1.3.0 to address this issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Woo-Popup