Threats tagged 'ghsa-qvpm-974r-m9gj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-125785Crocoblock · Cross-site Scripting Medium6.52026-11-12GCVE DatabaseCVE-2026-125785 A stored cross-site scripting (XSS) vulnerability exists in Crocoblock JetEngine up to version 3.9.1. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to inject malicious scripts that execute in the context of a user's browser. Report on CVE-2026-125785 Vulnerability CWE-79 #ghsa-qvpm-974r-m9gj	GCVE Database	2026-11-12

Page 1 of 1