CVE-2023-32966 WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS

2023-11-0717:29:17

CWE-352

Patchstack

www.cve.org

wordpress

jazz popups

csrf

stored xss

cve-2023-32966

0.0005 Low

EPSS

Percentile

17.1%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "jazz-popups",
    "product": "Jazz Popups",
    "vendor": "CRUDLab",
    "versions": [
      {
        "lessThanOrEqual": "1.8.7",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]