Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.Referenceshttps://crocoblock.com/changelog/?plugin=jet-engine