Jotform

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jotform records in CISA KEV

No Jotform vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-70335 CVE-2026-40803 · GHSA-37p3-r7pp-ghh4

Cross-site scripting in Jotform AI Chatbot WordPress plugin

LOW 30

Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-10 No fix listed CWE-79

TI-2024-21414 CVE-2024-32527 · GHSA-gjq8-9cgf-78fr

WordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00291 Published 2024-04-17 No fix listed CWE-79

TI-2024-02364 CVE-2024-2542 · GHSA-359m-9fqm-x95f

Jotform Online Forms <= 1.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 28

The Jotform Online Forms – Drag & Drop Form Builder, Securely Embed Contact Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.3.…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00324 Published 2024-05-02 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0