Crocoblock Jetpopup vulnerabilities

6 vulnerabilities

Known vulnerabilities in Crocoblock Jetpopup, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2025-68502crocoblockjetpopup+1
EPSS score
0.27%
Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup jet-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetPopup: from n/a through <= 2.0.20.1.
7.5CVE-2025-26944crocoblockjetpopup+1
EPSS score
0.37%
Missing Authorization vulnerability in Crocoblock JetPopup jet-popup allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetPopup: from n/a through <= 2.0.11.
6.5CVE-2025-53993crocoblockjetpopup+1
EPSS score
0.35%
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through <= 2.0.15.
6.5CVE-2025-53994crocoblockjetpopup+1
EPSS score
0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetPopup jet-popup allows DOM-Based XSS.This issue affects JetPopup: from n/a through <= 2.0.15.
6.5CVE-2025-53995crocoblockjetpopup+1
EPSS score
0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetPopup jet-popup allows Stored XSS.This issue affects JetPopup: from n/a through <= 2.0.15.1.
5.3CVE-2026-27347crocoblockjetpopup+1
EPSS score
0.31%
Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2.0.20.2.