Jtsternberg vulnerabilities
We track 3 vulnerabilities in Jtsternberg products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2026.
Latest Jtsternberg vulnerabilities
- 7.2 High severity
CMB2: Improper Neutralization of Input During Web Page Generation
The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'file_list' Field Type in all versions up to, and including, 2.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers
- 7.2 High severity
CMB2: Improper Neutralization of Input During Web Page Generation
The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<textarea_code field id> (e.g. kl_code, kl_post_code)' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and output escaping. This m
- 7.5 High severity
CMB2: Deserialization of Untrusted Data
The CMB2 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.10.1 via deserialization of untrusted input from the text_datetime_timestamp_timezone field. This makes it possible for authenticated attackers, with co