PT-2026-50351
CVE-2026-54189
·
Published
2026-06-16
·
Updated
2026-06-17
Description by
CVSS 3.1
7.1
HighMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
JetEngine versions prior to 3.8.11
Description
The JetEngine plugin for WordPress contains a Stored Cross-Site Scripting (XSS) flaw. This occurs because the software fails to properly sanitize input and escape output, allowing unauthenticated attackers to inject arbitrary web scripts into pages. These scripts execute automatically when a user visits the affected page.
Recommendations
Update JetEngine to version 3.8.11 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾