CVE-2026-28082

JetEngine versions up to 3.8.13.1 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a significant risk as it can lead to data theft, session hijacking, and other malicious activities. Organizations using affected versions should prioritize patching this vulnerability to safeguard their web applications and user data.