CVE-2026-87915 | danieliser Popup Maker Plugin up to 1.24.0 on WordPress Input Sanitization wp-admin/js/common.js jQuery.attr Name cross site scripting (EUVD-2026-82855)

September 18, 2026 Yanac

A vulnerability classified as problematic was found in danieliser Popup Maker Plugin up to 1.24.0 on WordPress. Impacted is the function jQuery.attr of the file wp-admin/js/common.js of the component Input Sanitization. Such manipulation of the argument Name leads to cross site scripting.

This vulnerability is documented as CVE-2026-87915. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More