CVE-2017-2284: XSS

Published Aug 2, 2017

Updated

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

66 affected components

Code-atlantic Popup Maker Wordpress=1.0.0

Code-atlantic Popup Maker Wordpress=1.0.1

Code-atlantic Popup Maker Wordpress=1.0.2

Code-atlantic Popup Maker Wordpress=1.0.3

Code-atlantic Popup Maker Wordpress=1.0.4

Code-atlantic Popup Maker Wordpress=1.0.5

Code-atlantic Popup Maker Wordpress=1.1.0

Code-atlantic Popup Maker Wordpress=1.1.1

Code-atlantic Popup Maker Wordpress=1.1.2

Code-atlantic Popup Maker Wordpress=1.1.3

Code-atlantic Popup Maker Wordpress=1.1.4

Code-atlantic Popup Maker Wordpress=1.1.5

Code-atlantic Popup Maker Wordpress=1.1.6

Code-atlantic Popup Maker Wordpress=1.1.7

Code-atlantic Popup Maker Wordpress=1.1.8

Code-atlantic Popup Maker Wordpress=1.1.9

Code-atlantic Popup Maker Wordpress=1.1.10

Code-atlantic Popup Maker Wordpress=1.2.0

Code-atlantic Popup Maker Wordpress=1.2.1

Code-atlantic Popup Maker Wordpress=1.2.2

Code-atlantic Popup Maker Wordpress=1.3.0

Code-atlantic Popup Maker Wordpress=1.3.1

Code-atlantic Popup Maker Wordpress=1.3.2

Code-atlantic Popup Maker Wordpress=1.3.3

Code-atlantic Popup Maker Wordpress=1.3.4

Code-atlantic Popup Maker Wordpress=1.3.5

Code-atlantic Popup Maker Wordpress=1.3.6

Code-atlantic Popup Maker Wordpress=1.3.7

Code-atlantic Popup Maker Wordpress=1.3.8

Code-atlantic Popup Maker Wordpress=1.3.9

Code-atlantic Popup Maker Wordpress=1.4.0

Code-atlantic Popup Maker Wordpress=1.4.1

Code-atlantic Popup Maker Wordpress=1.4.2

Code-atlantic Popup Maker Wordpress=1.4.3

Code-atlantic Popup Maker Wordpress=1.4.4

Code-atlantic Popup Maker Wordpress=1.4.5

Code-atlantic Popup Maker Wordpress=1.4.6

Code-atlantic Popup Maker Wordpress=1.4.7

Code-atlantic Popup Maker Wordpress=1.4.8

Code-atlantic Popup Maker Wordpress=1.4.9

Code-atlantic Popup Maker Wordpress=1.4.10

Code-atlantic Popup Maker Wordpress=1.4.11

Code-atlantic Popup Maker Wordpress=1.4.12

Code-atlantic Popup Maker Wordpress=1.4.13

Code-atlantic Popup Maker Wordpress=1.4.14

Code-atlantic Popup Maker Wordpress=1.4.15

Code-atlantic Popup Maker Wordpress=1.4.16

Code-atlantic Popup Maker Wordpress=1.4.17

Code-atlantic Popup Maker Wordpress=1.4.18

Code-atlantic Popup Maker Wordpress=1.4.19

Code-atlantic Popup Maker Wordpress=1.4.20

Code-atlantic Popup Maker Wordpress=1.4.21

Code-atlantic Popup Maker Wordpress=1.5.0

Code-atlantic Popup Maker Wordpress=1.5.1

Code-atlantic Popup Maker Wordpress=1.5.2

Code-atlantic Popup Maker Wordpress=1.5.3

Code-atlantic Popup Maker Wordpress=1.5.4

Code-atlantic Popup Maker Wordpress=1.5.5

Code-atlantic Popup Maker Wordpress=1.5.6

Code-atlantic Popup Maker Wordpress=1.5.7

Code-atlantic Popup Maker Wordpress=1.5.8

Code-atlantic Popup Maker Wordpress=1.6.0

Code-atlantic Popup Maker Wordpress=1.6.1

Code-atlantic Popup Maker Wordpress=1.6.2

Code-atlantic Popup Maker Wordpress=1.6.3

Code-atlantic Popup Maker Wordpress=1.6.4

Remediation

Patch Available

https://plugins.trac.wordpress.org/changeset/1697216/#file3

Event History

Aug 2, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-2284?

CVE-2017-2284 is classified as a high severity Cross-Site Scripting vulnerability.

How do I fix CVE-2017-2284?

To fix CVE-2017-2284, update Popup Maker to version 1.6.5 or later.

What versions of Popup Maker are affected by CVE-2017-2284?

CVE-2017-2284 affects all versions of Popup Maker prior to version 1.6.5.

Can CVE-2017-2284 allow for remote attacks?

Yes, CVE-2017-2284 allows remote attackers to inject arbitrary web scripts or HTML.

What type of vulnerability is CVE-2017-2284?

CVE-2017-2284 is a Cross-Site Scripting (XSS) vulnerability.