Popup Box (Popup Box Team) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-11-01. Vendor: Popup Box Team.

CVEs of Popup Box

• CVE-2024-37096 - CVSS 4.3 (medium), 2024-11-01: Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup…
• CVE-2024-34367 - CVSS 7.1 (high), 2024-05-06: Cross-Site Request Forgery (CSRF) vulnerability in Popup Box Team Popup box allows Cross-Site Scripting (XSS).This issue affects Popup box: from n/a through…
• CVE-2023-27414 - CVSS 7.1 (high), 2023-06-21: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Popup Box Team Popup box plugin <= 3.4.4 versions.