fr Sign in

7.1 High

CVE-2023-27414 Unauth

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Popup Box Team Popup box plugin <= 3.4.4 versions.

Affected products and versions

Product	Affected versions	Fixed in
Popup box 3.4	earliest → 3.4.4	No fix stated

References

patchstack.com patchstack.com

Timeline

Published June 21, 2023
Last modified April 28, 2026

The 3 CVEs of Popup box →

CVE-2024-37096 Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control… 4.3 Medium CVE-2024-34367 Cross-Site Request Forgery (CSRF) vulnerability in Popup Box Team Popup box allows Cross-Site Scripting (XSS).This issue… 7.1 High

Track this CVE