Back

CVE-2024-3231

May 17, 2024, 6:36 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Popup4Phone WordPress plugin

  • 1.0
  • 1.3.2

Popup4Phone WordPress plugin

  • 1.3.2

Source

contact@wpscan.com

Tags

contact@wpscan.com
2024-05-17
CVE-2024-3231

CVE-2024-3231 details

Published : May 17, 2024, 6:15 a.m.
Last Modified : May 17, 2024, 6:36 p.m.

Description

The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://wpscan.com/vulnerability/81dbb5c0-ccdd-4af1-b2f2-71cb1b37fe93/ contact@wpscan.com
This website uses the NVD API, but is not approved or certified by it.