Advisories · Technology
JetFormBuilder — Dynamic Blocks Form Builder.
Every CVE that names JetFormBuilder — Dynamic Blocks Form Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
JetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback
- JetFormBuilder — Dynamic Blocks Form Builder
- Path traversal
- CVSS 4.7 Medium
JetFormBuilder < 3.6.5.2 - Unauthenticated Stored XSS via WYSIWYG Field in Notification Emails
- JetFormBuilder — Dynamic Blocks Form Builder
- Cross-site scripting (XSS)
- CVSS 7.5 High
JetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Preset
- JetFormBuilder — Dynamic Blocks Form Builder
- Information disclosure