Popupally

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-34796 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AccessAlly PopupAlly allows Stored XSS.1.1. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Popupally

NVD

CVSS 3.1

4.8

EPSS

0.3%

CVE-2024-33639 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AccessAlly PopupAlly allows Stored XSS.1.1. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Popupally

NVD

CVSS 3.1

5.9

EPSS

0.1%

CVE-2024-23520 MEDIUM This Month

Missing Authorization vulnerability in AccessAlly PopupAlly.1.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Popupally

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2024-34796

EPSS 0% CVSS 4.8

MEDIUM This Month

XSS Popupally

NVD

CVE-2024-33639

EPSS 0% CVSS 5.9

MEDIUM This Month

XSS Popupally

NVD

CVE-2024-23520

EPSS 0% CVSS 4.3

MEDIUM This Month

Missing Authorization vulnerability in AccessAlly PopupAlly.1.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Popupally

NVD