Authorization bypass through predictable unsubscribe token in Popup Builder

Skrevet den af i Popup Builder by Forward Looking

Popup Builder generates newsletter unsubscribe tokens as an MD5 of the subscriber ID and e-mail address, a value an attacker can reproduce. An unauthenticated attacker who knows a subscriber’s e-mail address can brute-force the sequential subscriber ID to forge a valid unsubscribe link and remove that person from the site’s mailing list without their consent.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7
  • Popup Builder by Forward Looking 4.3.0
  • Popup Builder by Forward Looking 4.3.2
  • Popup Builder by Forward Looking 4.3.3
  • Popup Builder by Forward Looking 4.3.4
  • Popup Builder by Forward Looking 4.3.5
  • Popup Builder by Forward Looking 4.3.6
  • Popup Builder by Forward Looking 4.3.7
  • Popup Builder by Forward Looking 4.3.8
  • Popup Builder by Forward Looking 4.3.9
  • Popup Builder by Forward Looking 4.4.0
  • Popup Builder by Forward Looking 4.4.1
  • Popup Builder by Forward Looking 4.4.2

Improper output escaping and insufficient access control in different sections

Skrevet den af i Popup Builder by Forward Looking

Multiple instances of user-controlled data were rendered in HTML output without proper sanitization or escaping, potentially allowing stored cross-site scripting (XSS) attacks. Additionally, certain administrative actions lacked adequate capability checks and nonce verification, which could expose the plugin to cross-site request forgery (CSRF) and unauthorized access. Output is now escaped using context-appropriate WordPress functions (esc_attr, esc_url, esc_html, wp_kses, wp_kses_post).

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7

Unvalidated html attribute names and values enable XSS injection

Skrevet den af i Popup Builder by Forward Looking

The createAttrs() method constructs html attributes by directly concatenating user-controlled attribute names and values into the output string without any validation or sanitization. This allows attackers to inject specially crafted attribute names containing quotes or special characters to break out of the attribute context, or to inject malicious attribute values containing JavaScript event handlers

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.2
  • Popup Builder by Forward Looking 3.0.3
  • Popup Builder by Forward Looking 3.0.4
  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7
  • Popup Builder by Forward Looking 4.3.0
  • Popup Builder by Forward Looking 4.3.2
  • Popup Builder by Forward Looking 4.3.3
  • Popup Builder by Forward Looking 4.3.4
  • Popup Builder by Forward Looking 4.3.5
  • Popup Builder by Forward Looking 4.3.6
  • Popup Builder by Forward Looking 4.3.7
  • Popup Builder by Forward Looking 4.3.8
  • Popup Builder by Forward Looking 4.3.9
  • Popup Builder by Forward Looking 4.4.0
  • Popup Builder by Forward Looking 4.4.1

Code injection via rendering of custom js

Skrevet den af i Popup Builder by Forward Looking

An attacker was able to inject code via the custom JS into the frontend. This vulnerability is now mitigated by disabling the rendering of the custom JS when the sgpb-disable-custom-js option is enabled.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7
  • Popup Builder by Forward Looking 4.3.0
  • Popup Builder by Forward Looking 4.3.2

Improper cleanup of export files leading to information disclosure

Skrevet den af i Popup Builder by Forward Looking

Exported files were not properly deleted, making them accessible through direct URLs. This exposed sensitive data to unauthorized users.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7
  • Popup Builder by Forward Looking 4.3.0
  • Popup Builder by Forward Looking 4.3.2
  • Popup Builder by Forward Looking 4.3.3

Incorrect permission in AJAX actions

Skrevet den af i Popup Builder by Forward Looking

Due to a missing capability check on all AJAX actions, makes it possible for authenticated attackers, with subscriber-level access and above, to perform multiple unauthorized actions, such as deleting subscribers, and importing subscribers to conduct stored cross-site scripting attacks.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.2
  • Popup Builder by Forward Looking 3.0.3
  • Popup Builder by Forward Looking 3.0.4
  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7
  • Popup Builder by Forward Looking 4.3.0

Stored XSS to JS backdoor creation

Skrevet den af i Popup Builder by Forward Looking

Attackers are able to inject malicious JavaScript into the plugin’s settings, specifically within the “Alt Text” field of an image in the popup. The injected script can be executed when the popup is viewed, enabling attackers to escalate privileges and potentially create a backdoor for account takeover.

CVE number: CVE-2024-9428

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7
  • Popup Builder by Forward Looking 4.3.0
  • Popup Builder by Forward Looking 4.3.2
  • Popup Builder by Forward Looking 4.3.3
  • Popup Builder by Forward Looking 4.3.4

XSS in the Popup builder by looking forward

Skrevet den af i Popup Builder by Forward Looking

Due to insufficient input sanitization and output escaping on user supplied attributes, makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.2
  • Popup Builder by Forward Looking 3.0.3
  • Popup Builder by Forward Looking 3.0.4
  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7

Allow only administrator to do this action

Skrevet den af i Popup Builder by Forward Looking

Due to a missing capability check on several functions, While some functions contain a nonce check, the nonce can be obtained from the profile page of a logged-in user. This allows subscribers to perform several actions including deleting subscribers and perform blind Server-Side Request Forgery.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.2
  • Popup Builder by Forward Looking 3.0.3
  • Popup Builder by Forward Looking 3.0.4
  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7
  • Popup Builder by Forward Looking 4.3.0

Unescaped output in admin helper

Skrevet den af i Popup Builder by Forward Looking

Admin helper module contains a few outputs that can be malformed to create an xss attack and they need to be esacped.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.2
  • Popup Builder by Forward Looking 3.0.3
  • Popup Builder by Forward Looking 3.0.4
  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7

XSS in the SGPopup

Skrevet den af i Popup Builder by Forward Looking

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Looking Forward Software Incorporated.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.2
  • Popup Builder by Forward Looking 3.0.3
  • Popup Builder by Forward Looking 3.0.4
  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6

Enforced permissions check in popup builder

Skrevet den af i Popup Builder by Forward Looking

Some actions can be performed without having sufficient permissions.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.2
  • Popup Builder by Forward Looking 3.0.3
  • Popup Builder by Forward Looking 3.0.4
  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2
  • Popup Builder by Forward Looking 4.2.3
  • Popup Builder by Forward Looking 4.2.4
  • Popup Builder by Forward Looking 4.2.5
  • Popup Builder by Forward Looking 4.2.6
  • Popup Builder by Forward Looking 4.2.7

Prevent unauthorized access

Skrevet den af i Popup Builder by Forward Looking

Checks for admin permission for a specific action.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72
  • Popup Builder by Forward Looking 3.73
  • Popup Builder by Forward Looking 3.74
  • Popup Builder by Forward Looking 3.75
  • Popup Builder by Forward Looking 3.76
  • Popup Builder by Forward Looking 3.77
  • Popup Builder by Forward Looking 3.78
  • Popup Builder by Forward Looking 3.79
  • Popup Builder by Forward Looking 3.81
  • Popup Builder by Forward Looking 3.82
  • Popup Builder by Forward Looking 3.83
  • Popup Builder by Forward Looking 3.84
  • Popup Builder by Forward Looking 4.0
  • Popup Builder by Forward Looking 4.0.1
  • Popup Builder by Forward Looking 4.0.2
  • Popup Builder by Forward Looking 4.0.3
  • Popup Builder by Forward Looking 4.0.4
  • Popup Builder by Forward Looking 4.0.5
  • Popup Builder by Forward Looking 4.0.6
  • Popup Builder by Forward Looking 4.0.7
  • Popup Builder by Forward Looking 4.0.8
  • Popup Builder by Forward Looking 4.0.9
  • Popup Builder by Forward Looking 4.1.0
  • Popup Builder by Forward Looking 4.1.1
  • Popup Builder by Forward Looking 4.1.2
  • Popup Builder by Forward Looking 4.1.3
  • Popup Builder by Forward Looking 4.1.4
  • Popup Builder by Forward Looking 4.1.5
  • Popup Builder by Forward Looking 4.1.6
  • Popup Builder by Forward Looking 4.1.7
  • Popup Builder by Forward Looking 4.1.8
  • Popup Builder by Forward Looking 4.1.9
  • Popup Builder by Forward Looking 4.1.10
  • Popup Builder by Forward Looking 4.1.11
  • Popup Builder by Forward Looking 4.1.12
  • Popup Builder by Forward Looking 4.1.13
  • Popup Builder by Forward Looking 4.1.14
  • Popup Builder by Forward Looking 4.1.15
  • Popup Builder by Forward Looking 4.2.0
  • Popup Builder by Forward Looking 4.2.2

Added user compatibility check for AJAX requests

Skrevet den af i Popup Builder by Forward Looking

The lack of authorization resulted in multiple vulnerabilities such as the ability to send out newsletters with custom content, local file inclusion, deleting and importing subscribers, and more.

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.7
  • Popup Builder by Forward Looking 3.7.1
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63
  • Popup Builder by Forward Looking 3.64
  • Popup Builder by Forward Looking 3.64.1
  • Popup Builder by Forward Looking 3.65
  • Popup Builder by Forward Looking 3.65.1
  • Popup Builder by Forward Looking 3.65.2
  • Popup Builder by Forward Looking 3.66
  • Popup Builder by Forward Looking 3.67
  • Popup Builder by Forward Looking 3.68.1
  • Popup Builder by Forward Looking 3.68.2
  • Popup Builder by Forward Looking 3.68.3
  • Popup Builder by Forward Looking 3.68.4
  • Popup Builder by Forward Looking 3.68.5
  • Popup Builder by Forward Looking 3.68.5.1
  • Popup Builder by Forward Looking 3.68.5.2
  • Popup Builder by Forward Looking 3.69
  • Popup Builder by Forward Looking 3.69.1
  • Popup Builder by Forward Looking 3.69.2
  • Popup Builder by Forward Looking 3.69.3
  • Popup Builder by Forward Looking 3.69.4
  • Popup Builder by Forward Looking 3.69.5
  • Popup Builder by Forward Looking 3.69.6
  • Popup Builder by Forward Looking 3.71
  • Popup Builder by Forward Looking 3.72

Unauthenticated Stored Cross-Site Scripting / Authenticated Settings Modification, Configuration Disclosure, and User Data Export

Skrevet den af i Popup Builder by Forward Looking

One vulnerability allowed an unauthenticated attacker to inject malicious JavaScript into any published popup, which would then be executed whenever the popup loaded. The other vulnerability allowed any logged-in user, even those with minimal permissions such as a subscriber, to export a list of all newsletter subscribers, export system configuration information, and grant themselves access to various features of the plugin.

CVE-2020-10196 / CVE-2020-10195

This vulnerability affects the following application versions:

  • Popup Builder by Forward Looking 3.0.5
  • Popup Builder by Forward Looking 3.0.6
  • Popup Builder by Forward Looking 3.0.7
  • Popup Builder by Forward Looking 3.0.8
  • Popup Builder by Forward Looking 3.0.9
  • Popup Builder by Forward Looking 3.0.9.1
  • Popup Builder by Forward Looking 3.1
  • Popup Builder by Forward Looking 3.1.1
  • Popup Builder by Forward Looking 3.1.2
  • Popup Builder by Forward Looking 3.1.3
  • Popup Builder by Forward Looking 3.1.4
  • Popup Builder by Forward Looking 3.1.4.1
  • Popup Builder by Forward Looking 3.1.5
  • Popup Builder by Forward Looking 3.1.5.1
  • Popup Builder by Forward Looking 3.1.5.2
  • Popup Builder by Forward Looking 3.1.6
  • Popup Builder by Forward Looking 3.1.6.1
  • Popup Builder by Forward Looking 3.1.7
  • Popup Builder by Forward Looking 3.1.7.1
  • Popup Builder by Forward Looking 3.1.8
  • Popup Builder by Forward Looking 3.1.9
  • Popup Builder by Forward Looking 3.2
  • Popup Builder by Forward Looking 3.3
  • Popup Builder by Forward Looking 3.4
  • Popup Builder by Forward Looking 3.41
  • Popup Builder by Forward Looking 3.42
  • Popup Builder by Forward Looking 3.43
  • Popup Builder by Forward Looking 3.44
  • Popup Builder by Forward Looking 3.45
  • Popup Builder by Forward Looking 3.46
  • Popup Builder by Forward Looking 3.47
  • Popup Builder by Forward Looking 3.48
  • Popup Builder by Forward Looking 3.49
  • Popup Builder by Forward Looking 3.50
  • Popup Builder by Forward Looking 3.51
  • Popup Builder by Forward Looking 3.52
  • Popup Builder by Forward Looking 3.53
  • Popup Builder by Forward Looking 3.54
  • Popup Builder by Forward Looking 3.55
  • Popup Builder by Forward Looking 3.56
  • Popup Builder by Forward Looking 3.57
  • Popup Builder by Forward Looking 3.58
  • Popup Builder by Forward Looking 3.59
  • Popup Builder by Forward Looking 3.60
  • Popup Builder by Forward Looking 3.61
  • Popup Builder by Forward Looking 3.61.1
  • Popup Builder by Forward Looking 3.62
  • Popup Builder by Forward Looking 3.62.1
  • Popup Builder by Forward Looking 3.63