CVE-2026-15797 | danieliser Popup Maker Plugin up to 1.24.0 on WordPress Select2 sanitize_text_field post_title cross site scripting (EUVD-2026-82854)

September 18, 2026 Yanac

A vulnerability classified as problematic has been found in danieliser Popup Maker Plugin up to 1.24.0 on WordPress. This issue affects the function sanitize_text_field of the component Select2. This manipulation of the argument post_title causes cross site scripting.

This vulnerability is registered as CVE-2026-15797. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More