CVE-2025-14506 | ConvertForce Popup Builder Plugin up to 0.0.7 on WordPress Gutenberg Block entrance_animation cross site scripting

A vulnerability was found in ConvertForce Popup Builder Plugin up to 0.0.7 on WordPress. It has been declared as problematic. This affects the function entrance_animation of the component Gutenberg Block Handler. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-14506. It is possible to launch the attack remotely. No exploit is available.