Security Advisory

CVE-2025-49928

6.5
MEDIUM

Vulnerability Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows DOM-Based XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.
Published Date October 22, 2025
Official Source NIST NVD Advisory