← Database

CVE-2024-5799

MEDIUM CVSS: 4.8 Published: 2024-09-12 Modified: 2026-06-17

Description

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

Affected Platforms

Cminds Cm Popup

Weakness Type

CWE-79

References