CVE-2026-27537

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Popup by Supsystic up to version 1.11.2 allows an unauthenticated attacker to inject malicious scripts.

Risk Assessment

An attacker may execute scripts in the user's browser, potentially leading to session theft or other attacks.

Recommendation

Update Popup by Supsystic to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.