**Name of the Vulnerable Software and Affected Versions**

Popup Maker plugin versions prior to 1.8.13

**Description**

An issue allows an unauthenticated attacker to partially control the arguments of the `do action` function, invoking certain `popmake ` or `pum ` methods. This can be used to control content and delivery of the support debug text file, `popmake-system-info.txt`.

**Recommendations**

For versions prior to 1.8.13, update to version 1.8.13 or later to resolve the issue.