Skip to content
OpenAdvisories
High · 7.3 CVE-2026-75933 EUVD-2026-63998GHSA-qh39-pj9p-f8w7

Jet Admin Stored XSS

Published Aug 21, 2026 · Updated Aug 21, 2026 · Assigned by cisa-cg

Description

Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain.

Affected products

VendorProductAffectedFixed
Jet Admin Jet Admin — —

Advisories 1

References

  • url product
  • url third-party-advisory
  • url vdb-entry