CVE-2025-26744
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 15, 2025
CWE ID 79
Summary
CVE-2025-26744 is a Cross-site Scripting (XSS) vulnerability affecting NotFound JetBlog from versions n/a through 2.4.3. The issue stems from improper neutralization of user input during web page generation. An attacker can exploit this vulnerability to inject malicious scripts into a web page viewed by other users, potentially stealing sensitive information or taking control of their sessions. This poses a significant security risk, making it crucial for users to update their JetBlog installation as soon as a patch is available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.