Lucene search
+L

414 matches found

Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•19 views

PT-2026-1648

Name of the Vulnerable Software and Affected Versions Crocoblock JetEngine versions through 3.8.1.1 Description A missing authorization issue exists in Crocoblock JetEngine, allowing exploitation of incorrectly configured access control security levels. The issue concerns insufficient authorizati...

4.3CVSS6.5AI score0.00192EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/01/05 11:36 a.m.•22 views

WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin JetEngine versions = 3.7.7...

7.1CVSS6.1AI score0.00291EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/12/30 5:17 a.m.•14 views

WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin JetEngine versions = 3.8.1.1...

4.3CVSS7AI score0.00192EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/23 3:14 p.m.•18 views

CVE-2025-49938

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.3...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•20 views

EUVD-2025-35520

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrocoBlock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.3...

5.5AI score0.00223EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/22 3:15 p.m.•19 views

CVE-2025-49938

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.3...

6.5CVSS0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•34 views

CVE-2025-49938 WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.3...

6.5CVSS0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•10 views

CVE-2025-49938 WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.3...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•33 views

CVE-2025-49938

CVE-2025-49938 is a stored Cross-Site Scripting (XSS) vulnerability in CrocoBlock JetEngine (WordPress plugin) up to version 3.7.3. The issue stems from improper input neutralization during web page generation. Impact is consistent with stored XSS on JetEngine pages, with CVSS 3.1 base score 6.5 ...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•5 views

CVE-2025-49938: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.3...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•19 views

WordPress plugin JetEngine: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.5AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•31 views

PT-2025-43202

Name of the Vulnerable Software and Affected Versions CrocoBlock JetEngine versions through 3.7.3 Description A Stored Cross-site Scripting XSS issue exists in CrocoBlock JetEngine. This allows for the injection of malicious scripts into web pages. The issue is due to improper neutralization of...

6.5CVSS6.2AI score0.00223EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-25047

Malware in sbrugna...

5.4CVSS5.9AI score0.00605EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-11123

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00274EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2023-23661

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.01519EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-24706

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00222EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-52790

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00553EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-25364

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00504EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-25365

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00274EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-25368

Malicious code in bioql PyPI...

8.5CVSS6.6AI score0.00381EPSS
SaveExploits0References1
Rows per page
Query Builder