CVE-2023-3186 | BDVDB-2026-207462 Detail

Popup by Supsystic

Description#

The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

References#

https://wpscan.com/vulnerability/545007fc-3173-47b1-82c4-ed3fd1247b9c

Exploit#

https://wpscan.com/vulnerability/545007fc-3173-47b1-82c4-ed3fd1247b9c

History#

Version 12023-07-17Record published in the CVE List.
Version 22024-10-30Most recent update recorded in the CVE List.