6.5
Medium
CVE-2025-54687 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through <= 2.2.9.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetTabs 2.2 | earliest → 2.2.9.1 | No fix stated |
Other CVEs of JetTabs
The 7 CVEs of JetTabs →
CVE-2025-68498
Missing Authorization vulnerability in Crocoblock JetTabs jet-tabs allows Exploiting Incorrectly Configured Access…
6.5
Medium
CVE-2025-68499
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs…
6.5
Medium
CVE-2025-53985
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTabs jet-tabs allows Retrieve…
6.5
Medium
CVE-2025-53984
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs…
6.5
Medium