CVE-2024-5799

CVE-2024-5799: CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS

Vendor Unknown
Product CM Pop-Up Banners for WordPress
Published September 12, 2024
Last update September 12, 2024

CVSS base score

What the vulnerability does

01Description

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

Key dates

02Disclosure timeline

September 12, 2024 CVE published
September 12, 2024 Record updated