Description
Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CRUDLab | Jazz Popups | ≤ 1.8.7 | — |
Medium · 5.4
CVE-2023-32966
EUVD-2023-37187GHSA-wfqw-8765-478x
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS
Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack