CVE-2024-5799 — CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS

CVE-2024-5799

CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS PUBLISHED

Description (CNA)

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / CM Pop-Up Banners for WordPress	affected 0 before 1.7.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/3ee3023a-541c-40e6-8d62-24b4b110633c/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.