CVE-2024-5799 Information

Description

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

Reference

https://wpscan.com/vulnerability/3ee3023a-541c-40e6-8d62-24b4b110633c/