TI-2026-70335 CVE-2026-40803 · GHSA-37p3-r7pp-ghh4
Cross-site scripting in Jotform AI Chatbot WordPress plugin
Priority LOW 30
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
Vulnerabilities
3 records
TI-2024-02364 CVE-2024-2542 · GHSA-359m-9fqm-x95f
Jotform Online Forms <= 1.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Priority LOW 28
The Jotform Online Forms – Drag & Drop Form Builder, Securely Embed Contact Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.3.…
TI-2024-21414 CVE-2024-32527 · GHSA-gjq8-9cgf-78fr
WordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1.