CVE-2024-5799

State: PUBLISHED · Published: 2024-09-12 · Updated: 2024-09-12 · Assigner: WPScan

Description

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

CWE

(none)

Affected

Unknown / CM Pop-Up Banners for WordPress — v=0 <1.7.3 [affected]

CVSS

(none)

References

https://wpscan.com/vulnerability/3ee3023a-541c-40e6-8d62-24b4b110633c/ exploit, vdb-entry, technical-description

Source

cvelistV5-main/cves/2024/5xxx/CVE-2024-5799.json