TI-2025-10483 CVE-2025-11443 · GHSA-jq4v-4766-p3cq
JhumanJ OpnForm Forgotten Password email information exposure
Priority MEDIUM 61
A weakness has been identified in JhumanJ OpnForm up to 1.9.3.
JhumanJ
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
JhumanJ records in CISA KEVNo JhumanJ vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Opnform · all components
TI-2025-10481 CVE-2025-11441 · GHSA-cq8w-3m7m-rm3g
JhumanJ OpnForm HTTP Header excessive authentication
Priority MEDIUM 61
A vulnerability was identified in JhumanJ OpnForm up to 1.9.3.
TI-2025-10482 CVE-2025-11442 · GHSA-2xc4-fqpw-rrgw
JhumanJ OpnForm API Endpoint cross-site request forgery
Priority MEDIUM 57
A security flaw has been discovered in JhumanJ OpnForm up to 1.9.3.
TI-2025-10480 CVE-2025-11440 · GHSA-qjgp-g6hj-48j7
JhumanJ OpnForm edit access control
Priority MEDIUM 57
A vulnerability was determined in JhumanJ OpnForm up to 1.9.3.
TI-2025-10479 CVE-2025-11439 · GHSA-7wr2-f4hq-p3f2
JhumanJ OpnForm integrations authorization
Priority MEDIUM 57
A vulnerability was found in JhumanJ OpnForm up to 1.9.3.
TI-2025-10478 CVE-2025-11438 · GHSA-q378-hrph-87qv
JhumanJ OpnForm API Endpoint custom-domains authorization
Priority MEDIUM 57
A vulnerability has been found in JhumanJ OpnForm up to 1.9.3.
TI-2025-10476 CVE-2025-11436 · GHSA-v7mp-273w-5h6j
JhumanJ OpnForm answer unrestricted upload
Priority MEDIUM 57
A vulnerability was detected in JhumanJ OpnForm up to 1.9.3.
TI-2025-10475 CVE-2025-11435 · GHSA-gvxf-jfjm-228q
JhumanJ OpnForm submissions cross site scripting
Priority MEDIUM 57
A security vulnerability has been detected in JhumanJ OpnForm up to 1.9.3.
TI-2025-10477 CVE-2025-11437 · GHSA-4ffm-x9r6-99hr
JhumanJ OpnForm Form Editor forms cross site scripting
Priority MEDIUM 55
A flaw has been found in JhumanJ OpnForm up to 1.9.3.