SZB-fd86a82f04
Crocoblock JetFormBuilder XSS flaw through version 3.6.7.1 rated 5.3 in EUVD entry
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Crocoblock
- Product
- JetFormBuilder
- First seen
Summary
The EUVD entry EUVD-2026-114095 reports a cross-site scripting vulnerability in Crocoblock JetFormBuilder through version 3.6.7.1, scored 5.3 under CVSS v3.1. Per the item, it allows code injection through improperly neutralized script-related HTML tags.
If you use Crocoblock
Update JetFormBuilder to a version later than 3.6.7.1
Review form submissions and page content for injected script
What the sources say 1
· Mastodon: “Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.7.1.” Source