6.5
Moyenne
CVE-2026-97265 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| JetEngine 3.8 | premières → 3.8.15.3 | Pas de correctif indiqué |
Autres CVE de JetEngine
Les 8 CVE de JetEngine →
CVE-2026-97238
Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions
5.5
Moyenne
CVE-2026-97237
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
7.1
Élevée
CVE-2026-66581
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions
7.1
Élevée
CVE-2026-66613
Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions
9.8
Critique