Popupally

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-34796 Jun 03, 11:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AccessAlly PopupAlly allows Stored XSS.1.1. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Popupally Accessally

NVD

CVSS 3.1

4.8

EPSS

0.3%

CVE-2024-33639 Apr 26, 08:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AccessAlly PopupAlly allows Stored XSS.1.1. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Popupally Accessally

NVD

CVSS 3.1

5.9

EPSS

0.1%

CVE-2024-23520 Mar 26, 12:15 MEDIUM This Month

Missing Authorization vulnerability in AccessAlly PopupAlly.1.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Popupally Accessally

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2024-34796

EPSS 0% CVSS 4.8

MEDIUM This Month

XSS Popupally Accessally

NVD

CVE-2024-33639

EPSS 0% CVSS 5.9

MEDIUM This Month

XSS Popupally Accessally

NVD

CVE-2024-23520

EPSS 0% CVSS 4.3

MEDIUM This Month

Missing Authorization vulnerability in AccessAlly PopupAlly.1.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Popupally Accessally

NVD