anonhaven

CVE-2026-77115

NONE EPSS 0.21%
Updated Aug 23, 2026
Unknown
Parameter Value
Type CWE-79 Cross-Site Scripting (XSS)
Vendor Unknown
Public PoC No

Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them.

Weakness Type (CWE)

CWE-79 Cross-Site Scripting (XSS)

Vulnerable Products

unknown:brave

References 1

https://wpscan.com/vulnerability/d4a760c0-8e71-4261-a08b-9b6a296c631a/
contact@wpscan.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-77116

Unknown

None

CVE-2026-77003

WordPress

None

CVE-2026-14853

WordPress

None

CVE-2026-13598

WordPress

None

CVE-2026-16260

Unknown

None