CVE-2026-39766 Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions

Description

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
ARForms 7.1	earliest → 7.1.2	No fix stated

Other CVEs of ARForms

The 9 CVEs of ARForms →

CVE-2024-54217 Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a… 5.4 Medium CVE-2024-54216 Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms allows Path Traversal 7.7 High CVE-2024-32703 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in reputeinfosystems… 7.7 High CVE-2024-32704 Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a… 7.1 High