6.5
Medium
CVE-2025-68503 Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access…
Description
Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetBlog: from n/a through <= 2.4.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetBlog 2.4 | earliest → 2.4.7 | No fix stated |
Other CVEs of JetBlog
The 6 CVEs of JetBlog →
CVE-2026-94661
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
7.1
High
CVE-2025-49932
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
6.5
Medium
CVE-2025-49933
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
6.5
Medium
CVE-2025-26958
Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly…
7.5
High