Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-114708 EUVD-2026-109738GHSA-xfpv-2x93-2wm9

WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.8.6.1.

Affected products

VendorProductAffectedFixed
Crocoblock JetSmartFilters ≤ 3.8.6.1 —

References