CVE-2026-17019 | JetEngine Plugin up to 3.8.12 on WordPress SVG file cross site scripting

A vulnerability was found in JetEngine Plugin 3.1.3.1/3.8.4.1/3.8.6.1/3.8.9.1/3.8.12 on WordPress. It has been classified as problematic. This affects an unknown function of the component SVG file Handler. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-17019. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.