medium4.8
CVE-2024-5799
The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as C…
Impact
The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cminds | Cm Popup | before 1.7.3 |