CVE-2026-97238 Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions

Description

Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
JetEngine 3.8	earliest → 3.8.14.3	No fix stated

Other CVEs of JetEngine

The 8 CVEs of JetEngine →

CVE-2026-97265 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock 6.5 Medium CVE-2026-97237 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 7.1 High CVE-2026-66581 Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions 7.1 High CVE-2026-66613 Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions 9.8 Critical