Paper/Archive/CVE-2022-0479

CVE-2022-0479

Unknown Popup Builder – Create highly converting, mobile friendly marketing popups. — Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting

EPSS 44%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 98.7.987 × 2019.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter before using it in a SQL statement in the All Subscribers admin dashboard, leading to a SQL injection, which could also be used to perform Reflected Cross-Site Scripting attack against a logged in admin opening a malicious link

Affected

ProductAffectedFixed inSource

Popup Builder – Create highly converting, mobile friendly marketing popups.4.1.1 – < 4.1.14.1.1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/0d2bbbaf-fbfd-4921-ba4e-684e2e77e816 refplugins.trac.wordpress.org/changeset/2686454