popup manager project popup manager vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv3

The Popup Manager WordPress plugin up to and including 1.6.6 does not have authorisation and CSRF check when creating/updating popups, and is missing sanitisation as well as escaping, which could allow unauthenticated malicious users to create arbitrary popups and add Stored XSS ...

Popup Manager Project Popup Manager

4.3

CVSSv3

The Popup Manager WordPress plugin up to and including 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them

Popup Manager Project Popup Manager

6.1

CVSSv3

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

127 Github repositories

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook