Skip to content
Sign in
6.5 Medium

CVE-2025-54749 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through <= 2.2.0.2.

Affected products and versions

Product Affected versions Fixed in
JetProductGallery 2.2 earliest → 2.2.0.2 No fix stated

Other CVEs of JetProductGallery

The 2 CVEs of JetProductGallery →
CVE-2025-31412 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 6.5 Medium
Track this CVE