Unrated severityNVD Advisory· Published Sep 12, 2024· Updated Sep 12, 2024
CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS
CVE-2024-5799
Description
The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.
Affected products
2- Range: < 1.7.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/3ee3023a-541c-40e6-8d62-24b4b110633c/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.