JetFormBuilder vulnerabilities
CVEs whose affected-version data names the JetFormBuilder package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-84817High· 7.1Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.
▾ TwilightCrocoblock · jetformbuilderEPSS 0.15%via NVD
CVE-2026-54196Medium· 6.8Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: from n/a through 3.6.1.
Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: from n/a through 3.6.1.
▾ SunlitJetmonsters · JetFormBuilderEPSS 0.24%via NVD