Popup Box Team Popup Box vulnerabilities

3 known vulnerabilities affecting popup_box_team/popup_box.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2024-37096MEDIUMCVSS 4.3≥ n/a, ≤ 4.5.12024-11-01

CVE-2024-37096 [MEDIUM] CWE-862 CVE-2024-37096: Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1.

CVE-2024-34367HIGHCVSS 7.1≥ n/a, ≤ 4.1.22024-05-06

CVE-2024-34367 [HIGH] CWE-352 CVE-2024-34367: Cross-Site Request Forgery (CSRF) vulnerability in Popup Box Team Popup box allows Cross-Site Script Cross-Site Request Forgery (CSRF) vulnerability in Popup Box Team Popup box allows Cross-Site Scripting (XSS).This issue affects Popup box: from n/a through 4.1.2.

CVE-2023-27414MEDIUMCVSS 6.1≥ n/a, ≤ 3.4.42023-06-21

CVE-2023-27414 [MEDIUM] CWE-79 CVE-2023-27414: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Popup Box Team Popup box plugin <= 3.4 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Popup Box Team Popup box plugin <= 3.4.4 versions.