Skip to content
Sign in
6.5 Medium

CVE-2026-107865 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5.

Affected products and versions

Product Affected versions Fixed in
JetMenu 3.0 earliest → 3.0.5 No fix stated

Other CVEs of JetMenu

The 3 CVEs of JetMenu →
CVE-2025-53987 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve… 6.5 Medium CVE-2025-26953 Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly… 7.5 High
Track this CVE