CVE-2026-57338 Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions

Description

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
ARForms 7.1	earliest → 7.1.2	No fix stated

Other CVEs of ARForms

The 2 CVEs of ARForms →

CVE-2024-54216 Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms allows Path Traversal 7.7 High