CVE-2022-41638

Auth. Stored Cross-Site Scripting (XSS) in Pop-Up Chop Chop plugin <= 2.1.7 on WordPress.

Credits

Vulnerability discovered by Ngo Van Thien (Patchstack Alliance)

References

https://patchstack.com/database/vulnerability/pop-up/wordpress-pop-up-chop-chop-plugin-2-1-7-authenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve

https://wordpress.org/plugins/pop-up/