Bbsetheme Bbs E-popup — known CVE vulnerabilities

Every CVE whose affected-product data names Bbsetheme Bbs E-popup, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-34174 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BBS e-Theme BBS e-Popup plugin <= 2.4.5 versions.
• CVE-2023-36504 — CVSS 6.5 (medium): Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.