JetTabs vulnerabilities

The JetTabs plugin in versions up to and including 2.3.3.1 contains a Cross Site Scripting (XSS) vulnerability. A user with Contributor privileges can inject malicious script code.

The JetTabs plugin for WordPress (from Crocoblock) contains a DOM-Based XSS vulnerability in versions up to and including 2.2.12. Improper neutralization of input during web page generation allows DOM-based XSS attack.

The JetTabs plugin by Crocoblock is vulnerable to missing authorization, allowing exploitation of incorrectly configured access control security levels. The issue affects versions up to and including 2.2.12.