Lucene search
+L

91 matches found

CNNVD
CNNVD
•added 2021/12/15 12:00 a.m.•14 views

Crocoblock JetEngine 安全漏洞

Crocoblock JetEngine is a dynamic content plugin that allows you to build complex websites quickly and cost-effectively. A security vulnerability exists in Crocoblock JetEngine versions prior to 2.9.1 that stems from the application's inability to properly validate and clean form data...

9.8CVSS8.3AI score0.01052EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/15 12:00 a.m.•11 views

Crocoblock JetEngine 代码问题漏洞

crocoblock JetEngine is a dynamic content plugin that allows you to build complex websites quickly and cost-effectively. crocoblock JetEngine versions prior to 2.9.1 are vulnerable to a code issue that stems from the application's inability to properly validate and clean up form data. An attacker...

8.8CVSS6.2AI score0.01095EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•18 views

PT-2021-23429 · Crocoblock · Crocoblock Jetengine

Name of the Vulnerable Software and Affected Versions: Crocoblock JetEngine versions prior to 2.9.1 Description: The issue arises from improper validation and sanitization of form data. Recommendations: For versions prior to 2.9.1, update to version 2.9.1 or later to resolve the issue...

9.8CVSS9.4AI score0.01052EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/12/15 12:00 a.m.•13 views

Crocoblock JetEngine 跨站脚本漏洞

crocoblock JetEngine is a dynamic content plugin that allows you to build complex websites quickly and cost-effectively. crocoblock JetEngine prior to version 2.9.1 is vulnerable to a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and...

5.4CVSS5.6AI score0.00455EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•4 views

CVE-2021-41844: Improper Input Validation

Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data...

9.8CVSS5.7AI score0.01052EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/16 1:15 p.m.•15 views

CVE-2021-38607

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...

5.4CVSS6.1AI score0.00605EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/08/16 1:15 p.m.•9 views

CVE-2021-38607

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...

5.4CVSS6.2AI score0.00605EPSS
SaveExploits0References3
Prion
Prion
•added 2021/08/16 1:15 p.m.•29 views

Cross site scripting

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...

3.5CVSS5AI score0.00605EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/08/16 12:15 p.m.•40 views

CVE-2021-38607

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...

5.3AI score0.00605EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/16 12:00 a.m.•8 views

CVE-2021-38607: Improper Neutralization of Input During Web Page Generation

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...

5.4CVSS5.8AI score0.00605EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/16 12:00 a.m.•16 views

Crocoblock JetEngine 跨站脚本漏洞

Crocoblock JetEngine is a dynamic content plugin that allows you to build complex websites quickly and cost-effectively.A cross-site scripting vulnerability exists in Crocoblock JetEngine that can be exploited by attackers to perform XSS via custom form input...

5.4CVSS5.1AI score0.00605EPSS
SaveExploits0References2
Rows per page
Query Builder