A security vulnerability has been detected in JhumanJ OpnForm up to 1.9.3. Affected by this vulnerability is an unknown functionality of the file /show/submissions. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is a2af1184e53953afa8cb052f4055f288adcaa608. To fix this issue, it is recommended to deploy a patch.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 2.1 · jhumanjNVD modified 2026-10-08 13:10
Affected (CPE criteria) 1
cpe:2.3:a:jhumanj:opnform:*:*:*:*:*:*:*:*
References 5
- https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/edit?usp=sharing Exploit, Third Party Advisory
- https://github.com/JhumanJ/OpnForm/pull/900/commits/a2af1184e53953afa8cb052f4055f288adcaa608 Patch
- https://vuldb.com/?ctiid.327372 Permissions Required, VDB Entry
- https://vuldb.com/?id.327372 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.666876 Third Party Advisory, VDB Entry