{"id":"CVE-2017-2284","details":"Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","modified":"2026-07-08T05:50:03.607790112Z","published":"2017-08-02T16:29:00.520Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"1.0.0"},{"last_affected":"1.0.0"},{"introduced":"1.0.1"},{"last_affected":"1.0.1"},{"introduced":"1.0.2"},{"last_affected":"1.0.2"},{"introduced":"1.0.3"},{"last_affected":"1.0.3"},{"introduced":"1.0.4"},{"last_affected":"1.0.4"},{"introduced":"1.0.5"},{"last_affected":"1.0.5"},{"introduced":"1.1.0"},{"last_affected":"1.1.0"},{"introduced":"1.1.1"},{"last_affected":"1.1.1"},{"introduced":"1.1.2"},{"last_affected":"1.1.2"},{"introduced":"1.1.3"},{"last_affected":"1.1.3"},{"introduced":"1.1.4"},{"last_affected":"1.1.4"},{"introduced":"1.1.5"},{"last_affected":"1.1.5"},{"introduced":"1.1.6"},{"last_affected":"1.1.6"},{"introduced":"1.1.7"},{"last_affected":"1.1.7"},{"introduced":"1.1.9"},{"last_affected":"1.1.9"},{"introduced":"1.1.10"},{"last_affected":"1.1.10"},{"introduced":"1.2.0"},{"last_affected":"1.2.0"},{"introduced":"1.2.2"},{"last_affected":"1.2.2"},{"introduced":"1.3.0"},{"last_affected":"1.3.0"},{"introduced":"1.3.8"},{"last_affected":"1.3.8"},{"introduced":"1.3.9"},{"last_affected":"1.3.9"},{"introduced":"1.4.0"},{"last_affected":"1.4.0"},{"introduced":"1.4.1"},{"last_affected":"1.4.1"},{"introduced":"1.4.3"},{"last_affected":"1.4.3"},{"introduced":"1.4.4"},{"last_affected":"1.4.4"},{"introduced":"1.4.10"},{"last_affected":"1.4.10"},{"introduced":"1.4.12"},{"last_affected":"1.4.12"},{"introduced":"1.6.0"},{"last_affected":"1.6.0"},{"introduced":"1.6.1"},{"last_affected":"1.6.1"},{"introduced":"1.6.2"},{"last_affected":"1.6.2"},{"introduced":"1.6.3"},{"last_affected":"1.6.3"}],"source":"CPE_STRING","vendor_product":"code-atlantic:popup_maker","cpes":["cpe:2.3:a:code-atlantic:popup_maker:1.0.0:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.0.1:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.0.2:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.0.3:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.0.4:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.0.5:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.0:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.10:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.1:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.2:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.3:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.4:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.5:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.6:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.7:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.1.9:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.2.0:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.2.2:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.0:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.8:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.9:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.0:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.10:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.12:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.1:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.3:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.4:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.6.0:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.6.1:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.6.2:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.6.3:*:*:*:*:wordpress:*:*"]}]},"references":[{"type":"WEB","url":"https://wpvulndb.com/vulnerabilities/8878"},{"type":"ADVISORY","url":"https://jvn.jp/en/jp/JVN92921024/index.html"},{"type":"ADVISORY","url":"https://wordpress.org/plugins/popup-maker/#developers"},{"type":"FIX","url":"https://plugins.trac.wordpress.org/changeset/1697216/#file3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/popupmaker/popup-maker","events":[{"introduced":"d89a41c264942dc2563f01392f0f0c888ba05161"},{"last_affected":"274f38eba334f9ac5b0fb9a4e2ab0706b2958fa3"}],"database_specific":{"extracted_events":[{"introduced":"1.1.8"},{"last_affected":"1.1.8"},{"introduced":"1.2.1"},{"last_affected":"1.2.1"},{"introduced":"1.3.1"},{"last_affected":"1.3.1"},{"introduced":"1.3.2"},{"last_affected":"1.3.2"},{"introduced":"1.3.3"},{"last_affected":"1.3.3"},{"introduced":"1.3.4"},{"last_affected":"1.3.4"},{"introduced":"1.3.5"},{"last_affected":"1.3.5"},{"introduced":"1.3.6"},{"last_affected":"1.3.6"},{"introduced":"1.3.7"},{"last_affected":"1.3.7"},{"introduced":"1.4.2"},{"last_affected":"1.4.2"},{"introduced":"1.4.5"},{"last_affected":"1.4.5"},{"introduced":"1.4.6"},{"last_affected":"1.4.6"},{"introduced":"1.4.7"},{"last_affected":"1.4.7"},{"introduced":"1.4.8"},{"last_affected":"1.4.8"},{"introduced":"1.4.9"},{"last_affected":"1.4.9"},{"introduced":"1.4.11"},{"last_affected":"1.4.11"},{"introduced":"1.4.13"},{"last_affected":"1.4.13"},{"introduced":"1.4.14"},{"last_affected":"1.4.14"},{"introduced":"1.4.15"},{"last_affected":"1.4.15"},{"introduced":"1.4.16"},{"last_affected":"1.4.16"},{"introduced":"1.4.17"},{"last_affected":"1.4.17"},{"introduced":"1.4.18"},{"last_affected":"1.4.18"},{"introduced":"1.4.19"},{"last_affected":"1.4.19"},{"introduced":"1.4.20"},{"last_affected":"1.4.20"},{"introduced":"1.4.21"},{"last_affected":"1.4.21"},{"introduced":"1.5.0"},{"last_affected":"1.5.0"},{"introduced":"1.5.1"},{"last_affected":"1.5.1"},{"introduced":"1.5.2"},{"last_affected":"1.5.2"},{"introduced":"1.5.3"},{"last_affected":"1.5.3"},{"introduced":"1.5.4"},{"last_affected":"1.5.4"},{"introduced":"1.5.5"},{"last_affected":"1.5.5"},{"introduced":"1.5.6"},{"last_affected":"1.5.6"},{"introduced":"1.5.7"},{"last_affected":"1.5.7"},{"introduced":"1.5.8"},{"last_affected":"1.5.8"},{"introduced":"1.6.4"},{"last_affected":"1.6.4"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:code-atlantic:popup_maker:1.1.8:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.2.1:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.1:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.2:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.3:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.4:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.5:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.6:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.3.7:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.2:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.5:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.6:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.7:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.8:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.9:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.11:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.13:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.14:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.15:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.16:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.17:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.18:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.19:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.20:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.4.21:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.0:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.1:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.2:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.3:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.4:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.5:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.6:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.7:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.5.8:*:*:*:*:wordpress:*:*","cpe:2.3:a:code-atlantic:popup_maker:1.6.4:*:*:*:*:wordpress:*:*"]}}],"versions":["1.1.8","1.2.1","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","1.3.6","1.3.7","1.4.11","1.4.13","1.4.14","1.4.15","1.4.16","1.4.17","1.4.18","1.4.19","1.4.2","1.4.20","1.4.21","1.4.5","1.4.6","1.4.7","1.4.8","1.4.9","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","1.6.4","v1.6.4","v1.5.8","v1.5.7","v1.5.6","v1.5.5","v1.5.4","v1.5.3","v1.5.2","v1.5.1","v1.4.21","v1.4.20","v1.4.19","v1.4.18","v1.4.17","v1.4.16","v1.4.15","v1.4.14","v1.4.13","v1.4.11","v1.4.9","v1.4.8","v1.4.7","v1.4.6","v1.4.5","v1.4.2","v1.3.7","v1.3.6","v1.3.5","v1.3.4","v1.3.3","v1.3.2","v1.3.1","v1.3","v1.2.1","v1.1.8"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2284.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}