CVE-2020-10196

2020-03-1316:15:12

CWE-79

web.nvd.nist.gov

xss vulnerability

popup-builder plugin

wordpress

remote attackers

arbitrary javascript

unauthenticated attacker

ajax action

vulnerability bypass.

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.3%

CPENameOperatorVersion
sygnoos:popup\-buildersygnoos popup-builderlt3.64.1

CPE	Name	Operator	Version
sygnoos:popup\-builder	sygnoos popup-builder	lt	3.64.1

References

wpvulndb.com/vulnerabilities/10127

www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-popup-builder-plugin-affecting-over-100000-sites/