5.3
Medium
CVE-2026-27347 Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2.0.20.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetPopup 2.0 | earliest → 2.0.20.2 | No fix stated |
Other CVEs of JetPopup
The 6 CVEs of JetPopup →
CVE-2025-68502
Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup jet-popup allows Exploiting…
4.3
Medium
CVE-2025-53993
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve…
6.5
Medium
CVE-2025-53994
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
6.5
Medium
CVE-2025-53995
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
6.5
Medium