Lucene search
+L

91 matches found

NVD
NVD
•added 2026/09/30 6:18 p.m.•7 views

CVE-2026-97265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

6.5CVSS0.0013EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 5:39 p.m.•12 views

EUVD-2026-90216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 5:39 p.m.•17 views

CVE-2026-97265

The Crocoblock. Jetimpex Inc. JetEngine WordPress plugin (versions up to and including 3.8.15.3 ) is vulnerable to Stored Cross-site Scripting (XSS) . This flaw stems from the improper neutralization of input during web page generation. Successful exploitation could allow an attacker to inject ma...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 5:39 p.m.•5 views

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/28 4:18 p.m.•14 views

CVE-2026-81760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...

7.1CVSS0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•2 views

CVE-2026-81760: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2026/06/08 12:00 a.m.•10 views

VulnCheck KEV: CVE-2026-49076

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a through 3.8.9.1...

9.3CVSS5.8AI score0.004EPSS
SaveIn wildExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:16 p.m.•25 views

CVE-2026-42774

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine allows SQL Injection. This issue affects JetEngine: from n/a through 3.8.8.1...

9.3CVSS5.6AI score0.004EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/25 11:16 p.m.•26 views

CVE-2026-42774

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine allows SQL Injection. This issue affects JetEngine: from n/a through 3.8.8.1...

9.3CVSS0.004EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•3 views

CVE-2026-42774: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine allows SQL Injection. This issue affects JetEngine: from n/a through 3.8.8.1...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•38 views

PT-2026-43155

Name of the Vulnerable Software and Affected Versions JetEngine versions prior to 3.8.8.2 Description Improper neutralization of special elements used in an SQL command allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution to manipulate ...

9.3CVSS6AI score0.004EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/03/13 9:31 p.m.•10 views

EUVD-2026-11844

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

5.8AI score0.00518EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/13 7:54 p.m.•18 views

CVE-2026-32355

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

8.8CVSS0.00518EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 11:42 a.m.•7 views

CVE-2026-32355

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

5.8AI score0.00518EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•11 views

PT-2026-25202

CVE-2026-32355 Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1. https://t.co/Cl9q0DhF07...

5.8AI score0.00518EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•1 views

CVE-2026-32355: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

8.8CVSS5.8AI score0.00518EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/06 7:53 a.m.•18 views

CVE-2026-28134

Improper Control of Generation of Code 'Code Injection' vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: from n/a through = 3.7.2...

8.5CVSS5.8AI score0.00401EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/05 6:30 a.m.•27 views

EUVD-2026-9784

Improper Control of Generation of Code 'Code Injection' vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: from n/a through = 3.7.2...

8.5CVSS6AI score0.00401EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/05 6:16 a.m.•25 views

CVE-2026-28134

Improper Control of Generation of Code 'Code Injection' vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: from n/a through = 3.7.2...

8.5CVSS0.00401EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•15 views

CVE-2026-28134

Improper Control of Generation of Code 'Code Injection' vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: from n/a through = 3.7.2...

8.5CVSS6AI score0.00401EPSS
SaveExploits0References2
Rows per page
Query Builder