Unknown Popup Like Box – Page Plugin vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Popup Like Box – Page Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2022-0641ays-propopup_like_box+2
EPSS score
0.80%
The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the ays_fb_tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.