CyberSecBulletin

Jqueryform vulnerabilities

We track 2 vulnerabilities in Jqueryform products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 16, 2022.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Jqueryform vulnerabilities

  • 9.8 Critical severity

    Jqueryform: Unrestricted Upload of File with Dangerous Type

    CVE-2022-24984JqueryformEPSS 2.6%

    Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side,

  • 7.5 High severity

    Jqueryform: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2022-24983JqueryformEPSS 2.71%

    Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web s