CVE-2024-11339

creationtimestamp| type| source ---|---|--- 2024-12-06 09:06:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113605081712051075 2024-12-06 10:36:08+00:00| seen| https://t.me/cvedetector/12190...

CVE-2024-11339

The CVE-2024-11339 entry concerns the WordPress plugin Smart PopUp Blaster. It describes a Stored Cross-Site Scripting vulnerability in the spb-button shortcode, affecting all versions up to 1.4.3, due to insufficient input sanitization and output escaping on user-supplied attributes. Exploitatio...