Input validation vulnerability in Popup Builder – Create highly converting, mobile friendly marketing popups. 4.2.7

The Popup Builder plugin for WordPress, which helps create popups for marketing purposes, has a security vulnerability that allows attackers to inject harmful code into website pages. This can be done by using the custom JS functionality in versions up to 4.2.7, as the plugin does not properly filter and protect user-supplied attributes. This means that anyone with contributor-level access or higher can potentially add code that will run when someone visits the affected page.