CVE-2026-49074

There is an unauthenticated Cross Site Scripting (XSS) vulnerability in JetEngine versions <= 3.8.9.1. An attacker can exploit this flaw to inject malicious scripts in the user's context.

This vulnerability may lead to user data theft or session hijacking, posing a serious threat to the application's security and the organization's data.

It is recommended to update JetEngine to the latest version to mitigate this vulnerability and conduct a security audit of the application.