Lucene search
+L

532 matches found

NVD
NVD
•added 2026/09/30 6:18 p.m.•6 views

CVE-2026-97265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

6.5CVSS0.0013EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 5:39 p.m.•11 views

EUVD-2026-90216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 5:39 p.m.•17 views

CVE-2026-97265

The Crocoblock. Jetimpex Inc. JetEngine WordPress plugin (versions up to and including 3.8.15.3 ) is vulnerable to Stored Cross-site Scripting (XSS) . This flaw stems from the improper neutralization of input during web page generation. Successful exploitation could allow an attacker to inject ma...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 5:39 p.m.•5 views

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 5:39 p.m.•39 views

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

6.5CVSS0.0013EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 7:19 p.m.•9 views

CVE-2026-93618

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1...

6.5CVSS0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 6:14 p.m.•33 views

CVE-2026-93618 WordPress JetTricks plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1...

6.5CVSS0.00161EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/23 6:14 p.m.•9 views

CVE-2026-93618 WordPress JetTricks plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 6:14 p.m.•7 views

EUVD-2026-85462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 6:14 p.m.•18 views

CVE-2026-93618

The JetTricks plugin by Jetimpex Inc. (Crocoblock) is vulnerable to a Stored Cross-site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability affects versions from the initial release through 2.0.1 . Practical consequences include the ability ...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•5 views

CVE-2026-93618: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•2 views

PT-2026-97447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1...

6.5CVSS5.9AI score0.00161EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/04 11:17 a.m.•10 views

CVE-2026-27347

Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2.0.20.2...

5.3CVSS0.00313EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 10:49 a.m.•13 views

CVE-2026-27347

A Missing Authorization (Broken Access Control) vulnerability in the Crocoblock JetPopup WordPress plugin allows exploitation of incorrectly configured access control security levels. The issue affects versions from unknown through 2.0.20.2 . The CVSS 3.1 score is 5.3 (Medium) with a network atta...

5.3CVSS6AI score0.00313EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 10:49 a.m.•17 views

CVE-2026-27347 WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2.0.20.2...

5.3CVSS6AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 10:49 a.m.•10 views

EUVD-2026-70999

Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2.0.20.2...

5.3CVSS5.2AI score0.00313EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 10:49 a.m.•39 views

CVE-2026-27347 WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2.0.20.2...

5.3CVSS0.00313EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•4 views

CVE-2026-27347: Missing Authorization

Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2.0.20.2...

5.3CVSS5.9AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•18 views

PT-2026-85468

Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2.0.20.2...

5.3CVSS5.2AI score0.00313EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/28 4:18 p.m.•13 views

CVE-2026-81760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...

7.1CVSS0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder