{"id":"CVE-2017-2284","details":"Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","modified":"2026-04-10T03:59:21.193356Z","published":"2017-08-02T16:29:00.520Z","references":[{"type":"WEB","url":"https://wpvulndb.com/vulnerabilities/8878"},{"type":"ADVISORY","url":"https://jvn.jp/en/jp/JVN92921024/index.html"},{"type":"ADVISORY","url":"https://wordpress.org/plugins/popup-maker/#developers"},{"type":"FIX","url":"https://plugins.trac.wordpress.org/changeset/1697216/#file3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/popupmaker/popup-maker","events":[{"introduced":"0"},{"last_affected":"d89a41c264942dc2563f01392f0f0c888ba05161"},{"introduced":"0"},{"last_affected":"f1bf8279dcfa2aa10bd77b838df860d816d12aa0"},{"introduced":"0"},{"last_affected":"08d3cef2fe8cc87328caec61b729b31a96727832"},{"introduced":"0"},{"last_affected":"3a62995e03f9455e4d7db453d2990efa2a7f3855"},{"introduced":"0"},{"last_affected":"c4601551ab9b7014f99fce7eb0334e7d491b1d17"},{"introduced":"0"},{"last_affected":"5d58597257e10c4fd45259219ce43a1038032a71"},{"introduced":"0"},{"last_affected":"bd611d827c1a886a1629b009d14564e3cb7cc4de"},{"introduced":"0"},{"last_affected":"9d248eb350906e2433cf78341b803e5ea50cae6e"},{"introduced":"0"},{"last_affected":"610b50150311201b2939abd1ba7b6ebf6562eb18"},{"introduced":"0"},{"last_affected":"c8bb759c9527497ada68d902efeba3476ff83bfa"},{"introduced":"0"},{"last_affected":"b6cae0bd22ffcb158cdefbb62075d492b6b925ea"},{"introduced":"0"},{"last_affected":"84fcd409ee4914630d0e149771f219c59f62591b"},{"introduced":"0"},{"last_affected":"404f8a969a166e04add524049164edc13f44a1e2"},{"introduced":"0"},{"last_affected":"fddfce21693139109ee803a5c47c784c4538abaa"},{"introduced":"0"},{"last_affected":"fce7917b7d538eaf6de01c536b281af0d9fa32a2"},{"introduced":"0"},{"last_affected":"08c2cbb1356b06546e2c193307e8e504faf21264"},{"introduced":"0"},{"last_affected":"fecf9783b8295a36d2ca0b035eb7c092a221d0cd"},{"introduced":"0"},{"last_affected":"cc39a61503c4582d21dd983e7e0f66bda437d249"},{"introduced":"0"},{"last_affected":"0f95dcf78ec52e59b7b7a977ec35d46aba0a0405"},{"introduced":"0"},{"last_affected":"9cc40fb399c9e4c655192d4eb0abfe0d4e3062ec"},{"introduced":"0"},{"last_affected":"ea890df10e68a3989b30e1a052fa477fa502b1b0"},{"introduced":"0"},{"last_affected":"e15755ee4bf92dd8c2ac33160edd24977fae122d"},{"introduced":"0"},{"last_affected":"7a1cbbe02a104a5e81c5dc2ade7bd8da752a9d25"},{"introduced":"0"},{"last_affected":"640402fecc8d9d3357911f91483a7f086d5849db"},{"introduced":"0"},{"last_affected":"96f83632f541fbc3f20907028fb9c86065cdff40"},{"introduced":"0"},{"last_affected":"0fa9b681cc6f04b076a26fcea943beac72a62aed"},{"introduced":"0"},{"last_affected":"f48f6ae84e1000cbc825f712ec690832220de597"},{"introduced":"0"},{"last_affected":"33a211f8f08e406759c36fb172ba206abce8f277"},{"introduced":"0"},{"last_affected":"0eafc425b8d347b57110e8d65f3ee359069d67e8"},{"introduced":"0"},{"last_affected":"18bbb77e80c19ca565329b7a1f0c49ee95088a54"},{"introduced":"0"},{"last_affected":"a681ffb313fb71ca7b23967bd6a5d51fe0f77a09"},{"introduced":"0"},{"last_affected":"f8a061fcb5da8ad16003e2eb6093bf9441431f60"},{"introduced":"0"},{"last_affected":"4bf0eff611d3bc81337cacc49a1c395b2bc5b7fd"},{"introduced":"0"},{"last_affected":"7a422aefa838df45d7e826b0c8727e56d8358e4a"},{"introduced":"0"},{"last_affected":"274f38eba334f9ac5b0fb9a4e2ab0706b2958fa3"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"1.1.8"},{"introduced":"0"},{"last_affected":"1.2.1"},{"introduced":"0"},{"last_affected":"1.3.1"},{"introduced":"0"},{"last_affected":"1.3.2"},{"introduced":"0"},{"last_affected":"1.3.3"},{"introduced":"0"},{"last_affected":"1.3.4"},{"introduced":"0"},{"last_affected":"1.3.5"},{"introduced":"0"},{"last_affected":"1.3.6"},{"introduced":"0"},{"last_affected":"1.3.7"},{"introduced":"0"},{"last_affected":"1.4.2"},{"introduced":"0"},{"last_affected":"1.4.5"},{"introduced":"0"},{"last_affected":"1.4.6"},{"introduced":"0"},{"last_affected":"1.4.7"},{"introduced":"0"},{"last_affected":"1.4.8"},{"introduced":"0"},{"last_affected":"1.4.9"},{"introduced":"0"},{"last_affected":"1.4.11"},{"introduced":"0"},{"last_affected":"1.4.13"},{"introduced":"0"},{"last_affected":"1.4.14"},{"introduced":"0"},{"last_affected":"1.4.15"},{"introduced":"0"},{"last_affected":"1.4.16"},{"introduced":"0"},{"last_affected":"1.4.17"},{"introduced":"0"},{"last_affected":"1.4.18"},{"introduced":"0"},{"last_affected":"1.4.19"},{"introduced":"0"},{"last_affected":"1.4.20"},{"introduced":"0"},{"last_affected":"1.4.21"},{"introduced":"0"},{"last_affected":"1.5.0"},{"introduced":"0"},{"last_affected":"1.5.1"},{"introduced":"0"},{"last_affected":"1.5.2"},{"introduced":"0"},{"last_affected":"1.5.3"},{"introduced":"0"},{"last_affected":"1.5.4"},{"introduced":"0"},{"last_affected":"1.5.5"},{"introduced":"0"},{"last_affected":"1.5.6"},{"introduced":"0"},{"last_affected":"1.5.7"},{"introduced":"0"},{"last_affected":"1.5.8"},{"introduced":"0"},{"last_affected":"1.6.4"}]}}],"versions":["v1.1.8","v1.2.1","v1.3","v1.3.1","v1.3.2","v1.3.3","v1.3.4","v1.3.5","v1.3.6","v1.3.7","v1.4.11","v1.4.13","v1.4.14","v1.4.15","v1.4.16","v1.4.17","v1.4.18","v1.4.19","v1.4.2","v1.4.20","v1.4.21","v1.4.5","v1.4.6","v1.4.7","v1.4.8","v1.4.9","v1.5.0","v1.5.1","v1.5.2","v1.5.3","v1.5.4","v1.5.5","v1.5.6","v1.5.7","v1.5.8","v1.6.4"],"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"1.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.6"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.7"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.10"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.10"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.12"}]},{"events":[{"introduced":"0"},{"last_affected":"1.6.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.6.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.6.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.6.3"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2284.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}