CVE-2021-24152: XSS
First published: Mon Apr 05 2021(Updated: )
The "All Subscribers" setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting.
Credit: contact@wpscan.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sygnoos Popup Builder | <3.74 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for the Popup Builder plugin?
The vulnerability ID for the Popup Builder plugin is CVE-2021-24152.
What is the severity of CVE-2021-24152?
CVE-2021-24152 has a severity rating of medium.
What is the affected software for CVE-2021-24152?
The affected software for CVE-2021-24152 is Sygnoos Popup Builder version up to 3.74 for WordPress.
What type of vulnerability is CVE-2021-24152?
CVE-2021-24152 is a reflected Cross-Site Scripting (XSS) vulnerability.
How can I fix the vulnerability in Popup Builder?
To fix the vulnerability in Popup Builder, update to a version higher than 3.74.
- collector/nvd-index
- vendor/sygnoos
- product/popup builder
- canonical/sygnoos popup builder