This vulnerability in Popup by Supsystic (<= 1.13.0) involves broken authentication that can be exploited without authentication, enabling attackers to bypass security controls via an alternate path or channel. The CVSS v3.1 score is 9.1, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but high integrity and availability impacts. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.

An attacker can bypass authentication controls without any privileges or user interaction, potentially leading to unauthorized modification or disruption of the affected system's functionality. The integrity and availability of the system are highly impacted, but confidentiality is not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for updates from the vendor and consider restricting access to the affected component where feasible.