Skip to content
Sign in
7.1 High

CVE-2026-97237 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3.

Affected products and versions

Product Affected versions Fixed in
JetEngine 3.8 earliest → 3.8.14.3 No fix stated
JetEngine 3.8 earliest → 3.8.14.3 No fix stated

Other CVEs of JetEngine

The 8 CVEs of JetEngine →
CVE-2026-97265 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock 6.5 Medium CVE-2026-97238 Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions 5.5 Medium CVE-2026-66581 Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions 7.1 High CVE-2026-66613 Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions 9.8 Critical
Track this CVE