CVE-2025-49930: WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows Reflected XSS.This issue affects JetSearch: from n/a through <= 3.5.10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49930?
CVE-2025-49930 is classified as a moderate severity vulnerability due to its potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2025-49930?
To fix CVE-2025-49930, upgrade your CrocoBlock JetSearch to version 3.5.11 or later.
What type of vulnerability is CVE-2025-49930?
CVE-2025-49930 is an improper neutralization of input during web page generation vulnerability, specifically known as reflected cross-site scripting (XSS).
Which versions of JetSearch are affected by CVE-2025-49930?
CVE-2025-49930 affects JetSearch versions up to and including 3.5.10.
Can CVE-2025-49930 impact users' data security?
Yes, CVE-2025-49930 can potentially allow attackers to execute malicious scripts in the context of a user's session, compromising data security.