CVE-2024-5799

Name of the Vulnerable Software and Affected Versions: CM Pop-Up Banners for WordPress versions prior to 1.7.3

Description: The issue allows high privilege users, such as Contributors, to perform Cross-Site Scripting attacks due to the plugin not sanitising and escaping some of its popup fields.

Recommendations: For versions prior to 1.7.3, update to version 1.7.3 or later to resolve the issue.