CVE-2026-102398

The vulnerability allows unauthenticated Cross Site Scripting (XSS) attacks in Popup by Supsystic versions 1.13.1 and earlier, potentially enabling attackers to execute arbitrary scripts in the context of users' browsers. This could lead to data theft, session hijacking, or defacement of web content. Organizations using affected versions should prioritize remediation to safeguard against potential exploitation.