CVE-2024-3236 Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS

2024-06-1706:00:01

WPScan

www.cve.org

cve-2024-3236

easy notify lite

popup builder

wordpress

stored xss

JSON

The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting attacks.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Popup Builder",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "1.1.33"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpscan.com/vulnerability/a6c2da28-dc03-4bcc-a6c3-ee55a73861db/

JSON

Related for CVELIST:CVE-2024-3236