WordPress Popup Builder 3.49 Persistent Cross-Site Scripting
Vulnerability Description
WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title parameter. Attackers can submit crafted POST requests to the post.php endpoint with script payloads in the post_title field that execute when pages or posts display popup selections.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25744
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Unk9vvN
Affected Vendor
Popup-Builder
View all reports →