Crocoblock Jetpopup vulnerabilities
6 vulnerabilities
Known vulnerabilities in Crocoblock Jetpopup, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-68502crocoblockjetpopup+1
EPSS score0.27%
Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup jet-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetPopup: from n/a through <= 2.0.20.1.CVE-2025-26944crocoblockjetpopup+1EPSS score0.37%
Missing Authorization vulnerability in Crocoblock JetPopup jet-popup allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetPopup: from n/a through <= 2.0.11.CVE-2025-53993crocoblockjetpopup+1EPSS score0.35%
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through <= 2.0.15.CVE-2025-53994crocoblockjetpopup+1EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetPopup jet-popup allows DOM-Based XSS.This issue affects JetPopup: from n/a through <= 2.0.15.CVE-2025-53995crocoblockjetpopup+1EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetPopup jet-popup allows Stored XSS.This issue affects JetPopup: from n/a through <= 2.0.15.1.CVE-2026-27347crocoblockjetpopup+1EPSS score0.31%
Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects JetPopup: from n/a through 2.0.20.2.