7.1
Élevée
CVE-2026-97237 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3.
Produits et versions touchés
Autres CVE de JetEngine
Les 8 CVE de JetEngine →
CVE-2026-97265
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock
6.5
Moyenne
CVE-2026-97238
Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions
5.5
Moyenne
CVE-2026-66581
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions
7.1
Élevée
CVE-2026-66613
Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions
9.8
Critique