← Database

CVE-2024-38744

HIGH CVSS: 8.3 Published: 2024-11-01 Modified: 2026-06-17

Description

Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0.

Affected Platforms

Unknown

Weakness Type

CWE-862

References