Vulnerabilities and Security Researches

Popup by Supsystic, CVE-2021-24275

CVE, Research URL: CVE-2021-24275
Home page URL: Security reports for Popup by Supsystic
Application: Popup by Supsystic
Published on: May 06, 2021
Research Description: The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
Affected versions: Min -, max 1.10.5.
Status: vulnerable