Skip to content
Sign in
4.8 Medium

CVE-2024-5799 The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which…

Description

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
CM Pop-Up Banners for WordPress 1.7 earliest → < 1.7.3 1.7.3
cm_pop-up_banners 1.7 earliest → < 1.7.3 1.7.3
Track this CVE