CVE-2024-3236

2024-06-1706:15:08

[email protected]

web.nvd.nist.gov

wordpress

plugin

vulnerability

cross-site scripting

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting attacks.

Affected configurations

Vulners

Node

sygnoospopup_builderRange<1.1.33

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Popup Builder",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "1.1.33"
      }
    ],
    "defaultStatus": "unaffected"
  }
]