Vulnerabilities and security researches forbrave-popup-builder brave-popup-builder

Jun 07, 2024

CVE, Research URL: CVE-2024-35655
Home page URL: Security reports for Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Application: Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Date: Jun 04, 2024
Research Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brave Brave Popup Builder allows Stored XSS.This issue affects Brave Popup Builder: from n/a through 0.6.9.
Affected versions: max 0.7.0.
Status: vulnerable

CVE, Research URL: CVE-2023-51534
Home page URL: Security reports for Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Application: Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Date: Feb 01, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brave Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content allows Stored XSS.This issue affects Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content: from n/a through 0.6.2.
Affected versions: max 0.6.3.
Status: vulnerable

CVE, Research URL: CVE-2024-30453
Home page URL: Security reports for Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Application: Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Date: Mar 29, 2024
Research Description: Server-Side Request Forgery (SSRF) vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.6.5.
Affected versions: max 0.6.6.
Status: vulnerable

Aug 19, 2024

CVE, Research URL: CVE-2024-43337
Home page URL: Security reports for Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Application: Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Date: Aug 27, 2024
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.7.0.
Affected versions: max 0.7.1.
Status: vulnerable

Jan 10, 2026

CVE, Research URL: CVE-2025-68508
Home page URL: Security reports for Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Application: Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Date: Dec 24, 2025
Research Description: Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through <= 0.8.3.
Affected versions: max 0.8.3.
Status: vulnerable