CVE-2017-2284

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2017-08-02

https://jvn.jp/en/jp/JVN92921024/index.html

https://plugins.trac.wordpress.org/changeset/1697216/#file3