JetFormBuilder vulnerabilities

5 known vulnerabilities in JetFormBuilder from CrocoBlock. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  JetFormBuilder: Improper Neutralization of Input During Web Page Generation

  CVE-2026-123482Nov 9, 2026CrocoBlock

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Stored XSS.This issue affects JetFormBuilder: from n/a through 3.6.8.

• 7.1 High severity

  JetFormBuilder: Improper Neutralization of Input During Web Page Generation

  CVE-2026-123484Nov 9, 2026CrocoBlock

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows DOM-Based XSS.This issue affects JetFormBuilder: from n/a through 3.6.8.

• 9.8 Critical severity

  JetFormBuilder: Incorrect Privilege Assignment

  CVE-2026-119481Nov 4, 2026CrocoBlock

  Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1.

• 7.5 High severity

  JetFormBuilder: Missing Authorization

  CVE-2026-107431Oct 14, 2026CrocoBlock

  Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.6.

• 7.2 High severity

  JetFormBuilder: Improper Privilege Management

  CVE-2023-37866May 17, 2024CrocoBlock

  Improper Privilege Management vulnerability in Crocoblock JetFormBuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.0.8.