Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through <= 3.6.4.1.

INFO

Published Date :

2025-04-15T21:53:11.010Z

Last Modified :

2026-04-01T15:45:33.663Z

Source :

Patchstack
AFFECTED PRODUCTS

The following products are affected by CVE-2025-26870 vulnerability.

Vendors Products
Wordpress
  • Wordpress
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-26870.

CVSS Vulnerability Scoring System