Ivanweb - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2024-05-17.

Products

• Popup4phone - 2 CVEs

Newest CVEs of Ivanweb

• CVE-2024-3580 - CVSS 6.1 (medium), 2024-05-17: The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to…
• CVE-2024-3231 - CVSS 6.1 (medium), 2024-05-17: The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site…