melodicmedia Popover Windows

• CVE-2025-14394 Medium 4.3 Popover Windows <= 1.2 - Cross-Site Request Forgery to Arbitrary Popover Configuration Update 0.1%
• CVE-2025-14395 Medium 4.3 Popover Windows <= 1.2 - Missing Authorization to Authenticated (Subscriber+) Popover Configuration Update via AJAX Actions 0.2%