CVE-2026-97265

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3.

• CWE-79

• https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-8-15-3-cross-site-scripting-xss-vulnerability?_s_id=cve

Published

Sep 30, 2026

Last Modified

Sep 30, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9726Improperly Controlled Modification of Dynamically-Determined…9.8
• CVE-2026-97260Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <=…7.1
• CVE-2026-97261Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 v…5.3
• CVE-2026-97262Contributor Cross Site Scripting (XSS) in Visual Composer We…6.5
• CVE-2026-97263Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2026-97264Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2026-97266Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinn…6.5
• CVE-2026-97267Subscriber Broken Access Control in Prevent files / folders …4.3
• CVE-2026-97268Unauthenticated Cross Site Scripting (XSS) in Premmerce Wish…7.1
• CVE-2026-97269Unauthenticated Insecure Direct Object References (IDOR) in …6.5
• CVE-2026-97270Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 vers…6.5
• CVE-2026-97271Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3…7.1