CVE-2019-17574

Name of the Vulnerable Software and Affected Versions Popup Maker plugin versions prior to 1.8.13

Description An issue allows an unauthenticated attacker to partially control the arguments of the

do action

function, invoking certain

popmake 

or

pum 

methods. This can be used to control content and delivery of the support debug text file,

popmake-system-info.txt

.

Recommendations For versions prior to 1.8.13, update to version 1.8.13 or later to resolve the issue.