HighCVSS 7.1
EPSS 0.18%
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
Vendor
Jotform vulnerabilities
3 published CVES affecting Jotform, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- Jotform – AI Chatbot 1
- Jotform Online Forms 1
- Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform 1
Latest Jotform CVEs
Newest publication first
-
-
MediumCVSS 6.4 EPSS 0.32%
The Jotform Online Forms – Drag & Drop Form Builder, Securely Embed Contact Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping...
-
MediumCVSS 6.5 EPSS 0.29%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.