VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 22, 2025· Updated Jun 17, 2026

CVE-2025-49927

CVE-2025-49927

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Stored XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.1.

Affected products

2
  • WordPress/JetWooBuilderinferred2 versions
    <= 2.1.20.1+ 1 more
    • (no CPE)range: <= 2.1.20.1
    • (no CPE)range: <=2.1.20.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.