PatchTheCVE: accessallyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-34796: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ahttps://patchthecve.com/cve/CVE-2024-34796.htmlhttps://patchthecve.com/cve/CVE-2024-34796.htmlWed, 17 Jun 2026 07:34:04 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AccessAlly PopupAlly allows Stored XSS.This issue affects PopupAlly: from n/a through 2.1.1.CVE-2024-33639: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AccessAlhttps://patchthecve.com/cve/CVE-2024-33639.htmlhttps://patchthecve.com/cve/CVE-2024-33639.htmlWed, 17 Jun 2026 07:32:08 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AccessAlly PopupAlly allows Stored XSS.This issue affects PopupAlly: from n/a through 2.1.1.CVE-2024-23520: Missing Authorization vulnerability in AccessAlly PopupAlly.This issue affects PopupAlly: from n/a through 2.1https://patchthecve.com/cve/CVE-2024-23520.htmlhttps://patchthecve.com/cve/CVE-2024-23520.htmlWed, 17 Jun 2026 07:13:06 +0000MEDIUM 4.3: Missing Authorization vulnerability in AccessAlly PopupAlly.This issue affects PopupAlly: from n/a through 2.1.0.