{"schema":"threatline.record/2","record":{"id":"CVE-2026-115223","aliases":[],"summary":"Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block","details":"The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a decoding step that reconstructs them, allowing an authenticated administrator to execute arbitrary template expressions server-side and read PHP constants such as the site's database credentials and authentication keys.","categories":["Unclassified"],"product":"Smart Popup by Supsystic","vendor":"Unknown","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-115223","source_modified_at":"2026-10-28T10:45:14.251Z","fetched_at":"2026-10-28T15:55:58.673066Z","product":"Smart Popup by Supsystic","vendor":"Unknown","versions":[{"status":"affected","versionType":"semver","version":"0","lessThan":"2.0.2"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-115223","source_modified_at":"2026-10-28T10:45:14.251Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"name":"Smart Popup by Supsystic","ecosystem":null},"version":"2.0.2","basis":"first unaffected version stated in the CVE record"}],"cvss":4.9,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T10:45:14.251Z","modified_at":"2026-10-28T10:45:14.251Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-115223","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T10:45:14.251Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://wpscan.com/vulnerability/cf475664-aa8f-49ec-b1d6-62139dbad8d4/","tags":["exploit","vdb-entry","technical-description"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-28T10:45:14.251Z","content_hash":"ef9227b55a9c73b6c6cd86fac96ba44e117bd6fd079b64bcae59cb7cf4e15459"}}