PT-2025-3856 · WordPress · Jetengine

Name of the Vulnerable Software and Affected Versions: JetEngine plugin for WordPress versions up to, and including, 3.6.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

WordPress Jet Engine plugin <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via listtag Parameter vulnerability discovered by stealthcopter in WordPress Plugin JetEngine versions = 3.6.2...