Vulnerabilities > Cminds > CM Popup > 1.6.9

DATE CVE VULNERABILITY TITLE RISK
2024-09-12 CVE-2024-5799 Cross-site Scripting vulnerability in Cminds CM Popup
The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.
network
low complexity
cminds CWE-79
4.8