CVE-2025-11435

MEDIUM

JhumanJ OpnForm < 1.9.3 - Cross-Site Scripting in /show/submissions

Title source: llm
STIX 2.1

Description

A security vulnerability has been detected in JhumanJ OpnForm up to 1.9.3. Affected by this vulnerability is an unknown functionality of the file /show/submissions. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is a2af1184e53953afa8cb052f4055f288adcaa608. To fix this issue, it is recommended to deploy a patch.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.327372
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.327372
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.666876

Scores

CVSS v3 4.3
EPSS 0.0036
EPSS Percentile 27.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79 CWE-94
Status published
Products (1)
jhumanj/opnform < 1.9.3
Published Oct 08, 2025
Tracked Since Feb 18, 2026