Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.
CWE-20, NVD-CWE-Other