Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-3641
HistoryMay 16, 2024 - 6:15 a.m.

CVE-2024-3641

2024-05-1606:15:08
[email protected]
web.nvd.nist.gov
2
cve-2024-3641
newsletter popup
wordpress
cross-site scripting
unauthenticated visitors
admins

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%

JSON

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins

Related

wpvulndb 1
cve 1
vulnrichment 1
wpexploit 1
cvelist 1
wpvulndb
wpvulndb
Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
2024-04-25 00:00:00
cve
cve
CVE-2024-3641
2024-05-16 06:15:08
vulnrichment
vulnrichment
CVE-2024-3641 Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
2024-05-16 06:00:01
wpexploit
wpexploit
Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
2024-04-25 00:00:00
cvelist
cvelist
CVE-2024-3641 Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
2024-05-16 06:00:01

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for NVD:CVE-2024-3641
wpvulndb1cve1vulnrichment1wpexploit1cvelist1