CVE-2022-24985

8.8
HIGHCVSS v3.1 Base Score
2.32%
LOW RiskEPSS (83rd percentile)
NVD-CWE-Other

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.

Published: 2/16/2022
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2 Score

6

AV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS Score (Exploitation Probability)

2.32%LOW Exploitation Risk
83rd percentile

This vulnerability has a 2.32% probability of being exploited in the next 30 days, ranking higher than 83% of all scored CVEs.

CWE Classification

NVD-CWE-Other
Advertisement