4.3 Medium

CVE-2025-54018 Missing Authorization vulnerability in CreativeMindsSolutions CM Pop-Up banners cm-pop-up-banners allows Exploiting…

Description

Missing Authorization vulnerability in CreativeMindsSolutions CM Pop-Up banners cm-pop-up-banners allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM Pop-Up banners: from n/a through <= 1.8.4.

Affected products and versions

Product	Affected versions	Fixed in
CM Pop-Up banners 1.8	earliest → 1.8.4	No fix stated

The 2 CVEs of CM Pop-Up banners →

CVE-2025-24694 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in… 7.1 High

Do you use CM Pop-Up banners?

Track this CVE Watch CM Pop-Up banners Check my SBOMs

www.cveye.io/en/cve/CVE-2025-54018

Timeline

Published July 16, 2025
Last modified May 13, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-54018 Missing Authorization vulnerability in CreativeMindsSolutions CM Pop-Up banners cm-pop-up-banners allows Exploiting…

Description

Affected products and versions

Other CVEs of CM Pop-Up banners