Abhijith A

**Name of the Vulnerable Software and Affected Versions** WP Post Popup WordPress plugin versions prior to 3.7.4 **Description** The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for example in a multisite setup. **Recommendations** For WP Post Popup WordPress plugin versions prior to 3.7.4, update to version 3.7.4 or later to resolve the issue.