Threats tagged 'ghsa-6qfg-7r25-4526'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2026-93618Crocoblock · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-23GCVE DatabaseCVE-2026-93618 Crocoblock's JetTricks plugin contains a stored cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This vulnerability affects JetTricks versions up to and including 2.0.1. The flaw allows an attacker with limited privileges to inject malicious scripts that can impact confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. EPSS 0.2%Report on CVE-2026-93618 Vulnerability CWE-79 #ghsa-6qfg-7r25-4526	GCVE Database	2026-09-23

Page 1 of 1