Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:31:31 +0000 CVE-2024-5004 — CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS https://cve.radiocsirt.org/vuln/cve-2024-5004 <p><strong>Affected:</strong> Unknown CM Popup Plugin for WordPress, cminds cm_popup</p> <p>The CM Popup Plugin for WordPress WordPress plugin before 1.6.6 does not sanitise and escape some of the campaign settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks</p> <p><strong>Affected:</strong> Unknown CM Popup Plugin for WordPress, cminds cm_popup</p> <p>The CM Popup Plugin for WordPress WordPress plugin before 1.6.6 does not sanitise and escape some of the campaign settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks</p> https://cve.radiocsirt.org/vuln/cve-2024-5004