CVE-2024-3641

6.1MEDIUM

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins

发布于: 5/16/2024更新于: 5/19/2025
在NVD查看在MITRE查看

描述

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins

AI分析AI驱动

受影响产品

mndpsingh287newsletter_popup

参考资料