Beveiligingsadvies

CVE-2024-3231

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-17 06:00:02
Laatst bijgewerkt 2024-11-01 19:39:52
Toegewezen door WPScan
CVSS-score 6.1
Status PUBLISHED

Beschrijving

The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins.