Simple Popup

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-24406 May 10, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Simple Popup

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2014-3921 May 30, 14:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Simple Popup

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2023-24406

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Simple Popup

NVD

CVE-2014-3921

EPSS 0% CVSS 4.3

MEDIUM POC This Month

PHP WordPress XSS +1

NVD