CVE-2026-40803: Jotform – Ai Chatbot

High severity, CVSS 7.1.

Unauthenticated Cross Site Scripting (XSS) in Jotform &#8211; AI Chatbot <= 3.8.2 versions.

Affected products

• Jotform Jotform &#8211; Ai Chatbot: up to and including 3.8.2

Published 2026-10-10. Last modified 2026-10-10.