7.1
High
CVE-2026-94661 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetBlog 2.4 | earliest → 2.4.10 | No fix stated |
Other CVEs of JetBlog
The 6 CVEs of JetBlog →
CVE-2025-68503
Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access…
6.5
Medium
CVE-2025-49932
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
6.5
Medium
CVE-2025-49933
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog…
6.5
Medium
CVE-2025-26958
Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly…
7.5
High