Site icon API Security Blog

WordPress WP Popup Builder Plugin <= 1.3.5 is vulnerable to Content Injection

Software WP Popup Builder Type Plugin Vulnerable versions &lt;= 1.3.5 Fixed in 1.3.6 OWASP Top 10 A3: Injection Classification Content Injection CVE CVE-2024-9061 Patch priority Medium CVSS severity Medium (7.9) Developer Claim ownership PSID f6bee0964d75 Credits Francesco Carlucci Required privilege Unauthenticated Published 15 October, 2024 Vulnerability details Expand full details Have additional information or questions about this entry? Let us know. Solution We advise to mitigate or resolve the vulnerability…Read More

Exit mobile version