PT-2021-22241

Name of the Vulnerable Software and Affected Versions Crocoblock JetEngine versions prior to 2.6.1 Description The issue allows for cross-site scripting XSS attacks by remote authenticated users through a custom form input. This can potentially lead to the execution of malicious scripts on the...

CVE-2021-38607: Improper Neutralization of Input During Web Page Generation

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...

Crocoblock JetEngine 跨站脚本漏洞

Crocoblock JetEngine is a dynamic content plugin that allows you to build complex websites quickly and cost-effectively.A cross-site scripting vulnerability exists in Crocoblock JetEngine that can be exploited by attackers to perform XSS via custom form input...