CVE-2024-3641

6.1MEDIUM

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins

Опубликовано: 5/16/2024Обновлено: 5/19/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins

ИИ-АнализНа базе ИИ

Затронутые продукты

mndpsingh287newsletter_popup

Ссылки