What’s Vulnerable › Vulnerabilities

CVE-2022-24985

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-16 · updated 2026-06-17

Description

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.

Affected products

• Jqueryform: before 2022-02-05 — fixed in 2022-02-05

How to fix

Upgrade to a fixed version: Jqueryform 2022-02-05. Check the vendor advisory for mitigations.

References

• https://JQueryForm.com
• https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
• https://www.nou-systems.com/cyber-security
• https://JQueryForm.com
• https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
• https://www.nou-systems.com/cyber-security

Get alerted when CVE-2022-24985 or the next vulnerability affects your stack