crocoblock jetengine vulnerabilities in 2021, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 9.8CVE-2021-41844EPSS 1.1%2021-12-15

   Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.

2. 5.4CVE-2021-38607EPSS 0.6%2021-08-16

   Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.