CRUDLab

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

CRUDLab records in CISA KEV

No CRUDLab vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Jazz Popups · all components

TI-2023-16153 CVE-2023-32965 · GHSA-4ph4-7xqm-67v8

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CRUDLab Jazz Popups plugin <= 1.8.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-07-18 No fix listed CWE-79

TI-2023-16154 CVE-2023-32966 · GHSA-wfqw-8765-478x

LOW 27

Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00273 Published 2023-11-07 No fix listed CWE-352