Cminds: >> Cm Popup >> 1.6.6 Security Vulnerabilities
The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.
CVSS Score
4.8
EPSS Score
0.001
Published
2024-09-12