CVE-2026-54192 Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions.

Affected products and versions

Product	Affected versions	Fixed in
Popup box 6.2	earliest → 6.2.9	No fix stated

Other CVEs of Popup box

The 5 CVEs of Popup box →

CVE-2026-57631 Administrator SQL Injection in Popup box <= 6.0.1 versions 7.6 High CVE-2025-69021 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request… 5.4 Medium CVE-2025-57931 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request… 5.3 Medium CVE-2021-24458 The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use… Not rated