CVE-2024-32527: WordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32527?
CVE-2024-32527 is rated as a critical vulnerability due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2024-32527?
To fix CVE-2024-32527, upgrade the Jotform Online Forms to version 1.3.2 or later to mitigate the stored XSS vulnerability.
Who is affected by CVE-2024-32527?
CVE-2024-32527 affects users of Jotform Online Forms from version n/a through 1.3.1.
What types of attacks can CVE-2024-32527 lead to?
CVE-2024-32527 can facilitate stored cross-site scripting attacks, allowing hackers to execute malicious scripts in the context of a victim's browser.
Is there a known exploit for CVE-2024-32527?
While specific exploits may not be publicly disclosed, the nature of the stored XSS vulnerability poses a significant risk to users of affected versions.