Cross-site Scripting Vulnerability in Crocoblock JetPopup

CVE-2025-53995

What is CVE-2025-53995?

The JetPopup plugin from Crocoblock is affected by a serious vulnerability that allows for stored cross-site scripting (XSS). This occurs due to improper neutralization of user input during the web page generation process. As a result, malicious scripts can be injected and executed in the context of other users' browsers, posing significant risks to data integrity and user trust. Users of affected JetPopup versions should take immediate action to secure their installations and protect against potential exploitation.

References