CVE Database /
CVE-2021-34650
CVE · Medium
CVE-2021-34650 — Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation [optinmonster] < 2.6.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-34650
|
Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation [optinmonster] < 2.6.5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 2.6.5
|
2.6.5 |
2021-09-20 |
—
|
CVE-2021-34650
The Popup Builder & Popup Maker for WordPress plugin contained a reflected cross-site scripting vulnerability in versions up to 2.6.0 stemming from inadequate input sanitization in the load_previews function within the ~/OMAPI/Output.php file. This flaw permitted attackers to execute arbitrary JavaScript code by injecting malicious scripts into vulnerable parameters. The vulnerability was resolved in version 2.6.5.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings