CVE-2024-3641

6.1MEDIUM

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins

公開日: 5/16/2024更新日: 5/19/2025
NVDで表示MITREで表示

説明

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins

AI分析AIによる分析

影響を受ける製品

mndpsingh287newsletter_popup

参照