Lucene search
+L

68 matches found

CVE
CVE
•added 2025/12/29 9:15 p.m.•34 views

CVE-2025-68503

Technical details about CVE-2025-68503 (JetBlog missing authorization) are not publicly provided in the supplied documents. Monitor for updates and official advisories.

6.5CVSS6AI score0.00314EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/29 9:15 p.m.•2 views

CVE-2025-68503 WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Crocoblock JetBlog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetBlog: from n/a through 2.4.7...

6.5CVSS6AI score0.00314EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•18 views

PT-2025-53795

Name of the Vulnerable Software and Affected Versions Crocoblock JetBlog versions through 2.4.7 Description An authorization issue exists in Crocoblock JetBlog, allowing exploitation of incorrectly configured access control security levels. This can lead to unauthorized access. Recommendations...

6.5CVSS5.8AI score0.00314EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•11 views

WordPress plugin JetBlog 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS5.8AI score0.00314EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•2 views

CVE-2025-68503: Missing Authorization

Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetBlog: from n/a through = 2.4.7...

6.5CVSS5.9AI score0.00314EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/23 3:14 p.m.•13 views

CVE-2025-49933

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through = 2.4.4...

6.5CVSS5.9AI score0.00223EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/23 3:14 p.m.•10 views

CVE-2025-49932

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through = 2.4.4.1...

6.5CVSS5.9AI score0.00223EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•11 views

EUVD-2025-35526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrocoBlock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through = 2.4.4.1...

5.5AI score0.00223EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•13 views

EUVD-2025-35525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrocoBlock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through = 2.4.4...

5.9AI score0.00223EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/22 3:15 p.m.•11 views

CVE-2025-49932

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through = 2.4.4.1...

6.5CVSS0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/22 3:15 p.m.•13 views

CVE-2025-49933

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through = 2.4.4...

6.5CVSS0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•6 views

CVE-2025-49932 WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through = 2.4.4.1...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•22 views

CVE-2025-49932

CVE-2025-49932 : A Stored Cross-Site Scripting (XSS) vulnerability affects CrocoBlock JetBlog (jet-blog) versions up to and including 2.4.4.1. The root cause is improper neutralization of input during web page generation, allowing injected scripts to be stored and later viewed by other users. Imp...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•23 views

CVE-2025-49932 WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through = 2.4.4.1...

6.5CVSS0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•29 views

CVE-2025-49933 WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through = 2.4.4...

6.5CVSS0.00223EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•35 views

CVE-2025-49933

CVE-2025-49933 affects CrocoBlock JetBlog (jet-blog) with versions through 2.4.4. The issue is a Reflected Cross-Site Scripting (XSS) bug caused by improper input neutralization during web page generation. Likely impact is limited to the affected plugin’s handling of input in web pages; exploitat...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•6 views

CVE-2025-49933 WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through = 2.4.4...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•1 views

CVE-2025-49932: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through = 2.4.4.1...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•12 views

PT-2025-43196

Name of the Vulnerable Software and Affected Versions CrocoBlock JetBlog versions through 2.4.4.1 Description A flaw exists in CrocoBlock JetBlog that allows for Stored Cross-site Scripting XSS. This issue arises from improper neutralization of input during web page generation. An attacker could...

6.5CVSS6AI score0.00223EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•14 views

PT-2025-43197

Name of the Vulnerable Software and Affected Versions CrocoBlock JetBlog versions through 2.4.4 Description The software contains a flaw due to improper neutralization of input during web page generation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of...

6.5CVSS6.4AI score0.00223EPSS
SaveExploits0References4
Rows per page
Query Builder