CVE-2021-38607

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...

CVE-2021-38607

CVE-2021-38607 affects Crocoblock JetEngine prior to 2.6.1, where XSS is possible via a custom form input by remote authenticated users. The issue stems from an input handling flaw in the plugin component responsible for form data, enabling reflected or stored XSS depending on how the input is pr...

CVE-2021-38607: Improper Neutralization of Input During Web Page Generation

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...

Crocoblock JetEngine Cross-site Scripting Vulnerability

Crocoblock JetEngine is a dynamic content plugin that allows you to build complex websites quickly and cost-effectively.A cross-site scripting vulnerability exists in Crocoblock JetEngine that can be exploited by attackers to perform XSS via custom form input...

PT-2021-22241

Name of the Vulnerable Software and Affected Versions Crocoblock JetEngine versions prior to 2.6.1 Description The issue allows for cross-site scripting XSS attacks by remote authenticated users through a custom form input. This can potentially lead to the execution of malicious scripts on the...