The output controller reads the om-live-preview, om-live-rules-preview, and om-verify-site query string parameters without sanitization or nonce verification. These values are used to construct script tags and campaign identifiers that are rendered in the page footer. An attacker can craft a malicious URL containing JavaScript payloads in these parameters and trick an authenticated user or site visitor into clicking it, potentially executing arbitrary scripts in the context of the targeted site.
This vulnerability affects the following application versions:
- Popup Builder by OptinMonster 2.5.2
- Popup Builder by OptinMonster 2.5.3
- Popup Builder by OptinMonster 2.6.2
- Popup Builder by OptinMonster 2.6.3
- Popup Builder by OptinMonster 2.6.4
- Popup Builder by OptinMonster 2.6.5
- Popup Builder by OptinMonster 2.6.6
- Popup Builder by OptinMonster 2.6.7
- Popup Builder by OptinMonster 2.6.8
- Popup Builder by OptinMonster 2.6.9
- Popup Builder by OptinMonster 2.6.10
- Popup Builder by OptinMonster 2.6.11
- Popup Builder by OptinMonster 2.6.12
- Popup Builder by OptinMonster 2.7.0
- Popup Builder by OptinMonster 2.8.0
- Popup Builder by OptinMonster 2.8.1
- Popup Builder by OptinMonster 2.9.0
- Popup Builder by OptinMonster 2.10.0
- Popup Builder by OptinMonster 2.11.0
- Popup Builder by OptinMonster 2.11.1
- Popup Builder by OptinMonster 2.11.2
- Popup Builder by OptinMonster 2.12.0
- Popup Builder by OptinMonster 2.12.1
- Popup Builder by OptinMonster 2.13.0
- Popup Builder by OptinMonster 2.13.1
- Popup Builder by OptinMonster 2.13.2
- Popup Builder by OptinMonster 2.13.3
- Popup Builder by OptinMonster 2.13.4
- Popup Builder by OptinMonster 2.13.5
- Popup Builder by OptinMonster 2.13.6
- Popup Builder by OptinMonster 2.13.7
- Popup Builder by OptinMonster 2.13.8
- Popup Builder by OptinMonster 2.14.0
- Popup Builder by OptinMonster 2.14.1
- Popup Builder by OptinMonster 2.15.0
- Popup Builder by OptinMonster 2.15.1
- Popup Builder by OptinMonster 2.15.2
- Popup Builder by OptinMonster 2.15.3
- Popup Builder by OptinMonster 2.16.0
- Popup Builder by OptinMonster 2.16.1
- Popup Builder by OptinMonster 2.16.2