Upqode Plum: Spin Wheel & Email Pop-Up
2 CVEs affecting Upqode Plum: Spin Wheel & Email Pop-Up. Latest disclosed: 2024-11-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38744 | High | 8.3 | 2024-11-01 | Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This… |
CVE-2024-38743 | Medium | 5.3 | 2024-11-01 | Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows . This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0. |