CVE-2024-27960

Description

References

• patchstack.com/database/vulnerability/email-subscribe/wordpress-email-subscription-popup-plugin-1-2-20-cross-site-scripting-xss-vulnerability · Third Party Advisory

Weitere Schwachstellen in email subscription popup

• CVE-2024-11195MITTEL 6.4The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form s…
• CVE-2023-6555MITTEL 6.1The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page, …
• CVE-2023-6527MITTEL 6.1The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all version…
• CVE-2023-30489MITTEL 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <= 1.2.16 versions.