CM Popup Plugin for WordPress – Popup Maker, b9d2f603-fd4a-4028-9799-7a88f2ce279c
- CVE, Research URL
- Published on
- -
- Research Description
- CM Pop-Up – Create engaging popups to capture attention and boost interaction [cm-pop-up-banners] < 1.4.11 CM Pop-Up banners < 1.4.11 - Authenticated Stored XSS When saving a new campaign, a user with edit_pages capabilities can store scripts in the campaign’s pop-up content. The code can then be executed on every page on the website.
- Affected versions
-
max 1.4.11.
- Status
-
vulnerable