brave-popup-builder vulnerabilities

CVEs whose affected-version data names the brave-popup-builder package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48202Medium· 5.3

5d ago

WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-builder allows Code Injection.This issue affects Brave: from n/a through 0.8.8.

▾ SunlitBrave · brave-popup-builderEPSS 0.29%via CVEORG