7.1
High
CVE-2025-68904 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme JNews -…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme JNews - Frontend Submit jnews-frontend-submit allows Reflected XSS.This issue affects JNews - Frontend Submit: from n/a through <= 11.0.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JNews - Frontend Submit 11.0 | earliest → 11.0.0 | No fix stated |
References
- patchstack.com patchstack.com
Timeline
- Published
- Last modified