CVE-2024-52434

Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through = 1.10.29...

CVE-2024-52434

creationtimestamp| type| source ---|---|--- 2024-11-18 14:40:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113504472383626686 2024-11-18 17:23:07+00:00| seen| https://t.me/cvedetector/11340...

WordPress Popup by Supsystic Plugin <= 1.10.29 is vulnerable to Remote Code Execution (RCE)

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.29 Fixed in 1.10.30 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-52434 Patch priority Low CVSS severity Low 9.1 Developer Supsystic PSID 8689f64c5ee0 Credits Hakiduck Required privilege...