Threats tagged 'ghsa-c5jq-fpv4-5rjj'

Crocoblock JetEngine versions up to 3.9.0.2 contain a stored cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This vulnerability allows an attacker with low privileges and user interaction to execute malicious scripts, potentially leading to partial confidentiality, integrity, and availability impacts.