Skip to content
Threat Feed
Subscribe

Vendor

Kiteworks

1 brief RSS
medium advisory

Kiteworks Secure Data Forms Stored XSS Vulnerability (CVE-2026-24750)

An authenticated attacker can exploit a stored XSS vulnerability (CVE-2026-24750) in Kiteworks Secure Data Forms before version 9.2.1 due to improper neutralization of input, leading to arbitrary script execution in the context of other users.

Kiteworks Secure Data Forms xss web-application kiteworks
2r 1t 1i