Input validation vulnerability in Popup Builder – Create highly converting, mobile friendly marketing popups. 4.2.6

The Popup Builder is a plugin for WordPress that helps create effective marketing popups for mobile devices. Unfortunately, it has a security issue called Stored Cross-Site Scripting, which affects all versions up to and including 4.2.6. This means that the plugin does not properly protect against harmful code being added to popups by users with certain permissions. As a result, attackers with contributor-level or higher access can inject their own code into popups and potentially harm users who view them.