Description
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jotform | Jotform – AI Chatbot | ≤ 3.8.2 | — |
High · 7.1
CVE-2026-40803
EUVD-2026-96540GHSA-37p3-r7pp-ghh4
WordPress Jotform – AI Chatbot plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack