Lucene search
+L

47 matches found

NVD
NVD
•added 2026/10/09 10:16 a.m.•7 views

CVE-2026-94667

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2...

6.5CVSS0.00156EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/09 10:00 a.m.•10 views

EUVD-2026-95621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/09 10:00 a.m.•50 views

CVE-2026-94667 WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2...

6.5CVSS0.00156EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/09 10:00 a.m.•24 views

CVE-2026-94667

The Crocoblock JetReviews WordPress plugin (versions up to and including 3.1.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This is caused by the improper neutralization of input during web page generation . The vulnerability allows an attacker to inject malicious scripts that are store...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•4 views

CVE-2026-94667: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•10 views

PT-2026-108836

Name of the Vulnerable Software and Affected Versions JetReviews versions prior to 3.1.2 Description Stored Cross-site Scripting XSS occurs due to improper neutralization of input during web page generation. This allows an attacker to inject malicious scripts that are stored on the server and...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/10/04 7:33 a.m.•12 views

WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetReviews versions = 3.1.2...

5.7AI score0.00156EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/01 2:12 p.m.•20 views

WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JetReviews versions = 3.0.1...

5.3CVSS5.5AI score0.0033EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/07/13 10:16 a.m.•37 views

CVE-2026-61975

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

5.3CVSS0.0033EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•21 views

EUVD-2026-43441

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

5.3CVSS6.1AI score0.0033EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•20 views

CVE-2026-61975

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

5.3CVSS6.1AI score0.0033EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/13 8:41 a.m.•48 views

CVE-2026-61975

CVE-2026-61975 affects the WordPress JetReviews plugin (Crocoblock) up to version 3.0.1. The issue is Exposure of Sensitive System Information to an Unauthorized Control Sphere, allowing retrieval of embedded sensitive data from JetReviews. The NVD entries describe the vulnerability but do not pr...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/13 8:41 a.m.•17 views

CVE-2026-61975 WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/13 8:41 a.m.•51 views

CVE-2026-61975 WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

5.3CVSS0.0033EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•33 views

PT-2026-57797

Name of the Vulnerable Software and Affected Versions JetReviews versions prior to 3.0.2 Description An issue in the Crocoblock JetReviews plugin allows the retrieval of embedded sensitive system information by an unauthorized control sphere. Recommendations Update JetReviews to version 3.0.2 or...

5.3CVSS5.6AI score0.0033EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•5 views

CVE-2026-61975: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/02 12:17 p.m.•20 views

CVE-2026-57354

Subscriber Cross Site Scripting XSS in JetReviews = 3.0.0.1 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/02 11:15 a.m.•19 views

CVE-2026-57354 WordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetReviews = 3.0.0.1 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/02 11:15 a.m.•39 views

CVE-2026-57354

The CVE-2026-57354 entry describes a Subscriber Cross Site Scripting (XSS) vulnerability in the WordPress JetReviews plugin limited to versions

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/02 11:15 a.m.•51 views

CVE-2026-57354 WordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetReviews = 3.0.0.1 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
Rows per page
Query Builder