Skip to content
OpenAdvisories

Vendor

Jotform

3 known vulnerabilities.

Products

Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform 1 Jotform Online Forms 1 Jotform – AI Chatbot 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-2542

    Jotform Online Forms <= 1.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    The Jotform Online Forms – Drag & Drop Form Builder, Securely Embed Contact Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.3.1 due to insufficient input sanitizatio…

    Jotform Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform Web / CMS
  • Medium 6.5
    CVE-2024-32527

    WordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1.

    Jotform Jotform Online Forms