Vulnerability · Published Mar 28, 2022 · Assigned by WPScan

CVE-2022-0479Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting

Critical 9.8

In plain English

A critical-severity SQL injection in Popup Builder – Create highly converting, mobile friendly marketing popups. from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 43.8% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS NVD)9.8Critical

Exploit odds (30 days)43.8%top 1.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Nuclei

Official description

The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter before using it in a SQL statement in the All Subscribers admin dashboard, leading to a SQL injection, which could also be used to perform Reflected Cross-Site Scripting attack against a logged in admin opening a malicious link

Affected products (as reported)

Vendor	Product	Versions
Unknown	Popup Builder – Create highly converting, mobile friendly marketing popups.	4.1.1 – before 4.1.1

Weakness: CWE-89

References

https://wpscan.com/vulnerability/0d2bbbaf-fbfd-4921-ba4e-684e2e77e816 x_refsource_MISC
https://plugins.trac.wordpress.org/changeset/2686454 x_refsource_CONFIRM