6.5
CVSSv3

CVE-2025-26744

CVSSv4: NA | CVSSv3: 6.5 | CVSSv2: NA | VMScore: 750 | EPSS: 0.00034 | KEV: Not Included
Published: 15/04/2025 Updated: 15/04/2025

Vulnerability Summary

DOM-Based Cross-Site Scripting Vulnerability in NotFound JetBlog Below 2.4.3

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound JetBlog allows DOM-Based XSS. This issue affects JetBlog: from n/a up to and including 2.4.3.