JetEngine (N/a Through 3.9.0)

The Crocoblock JetEngine plugin is affected by an Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in versions up to 3.9.0.