6.5
Medium
CVE-2025-49932 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through <= 2.4.4.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetBlog 2.4 | earliest → 2.4.4.1 | No fix stated |
Other CVEs of JetBlog
The 6 CVEs of JetBlog →
CVE-2026-94661
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
7.1
High
CVE-2025-68503
Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access…
6.5
Medium
CVE-2025-49933
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
6.5
Medium
CVE-2025-26958
Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly…
7.5
High