CVE-2022-24985: Jqueryform

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.

Affected products

• Jqueryform Jqueryform: before 2022-02-05 (fixed in 2022-02-05)

Published 2022-02-16. Last modified 2026-06-17.