Crocoblock Jetengine — known CVE vulnerabilities

Every CVE whose affected-product data names Crocoblock Jetengine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-41844 — CVSS 9.8 (critical): Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.
• CVE-2021-38607 — CVSS 5.4 (medium): Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.