title: WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS
description: Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: jazz-popups
product: Jazz Popups
vendor: CRUDLab
versions:
lessThanOrEqual: 1.8.7, status: affected, version: n/a, versionType: custom
}