Threats tagged 'ghsa-4wv6-hfwf-hgxc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-28082JetEngine (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-06CVE Database V5CVE-2026-28082 CVE-2026-28082 is a high-severity unauthenticated cross-site scripting (XSS) vulnerability in JetEngine by Crocoblock. Jetimpex Inc. It affects versions up to and including 3.8.13.1. The vulnerability allows improper neutralization of input during web page generation, potentially leading to reflected XSS attacks. There is no official patch or vendor advisory confirming remediation at this time. EPSS 0.3%Vulnerability Crocoblock. Jetimpex CWE-79 #ghsa-4wv6-hfwf-hgxc	CVE Database V5	2026-08-06

Page 1 of 1 · 1 duplicate CVE record merged