Jotform AI Chatbot CVE-2026-40803

Exploitation requires a victim to interact with attacker-controlled content (UI:R) - typically clicking a crafted link to, or loading, a page where the Jotform AI Chatbot plugin (version 3.8.2 or earlier) renders unsanitized input. The attacker needs no authentication or privileges (PR:N) to supply the payload, but cannot succeed without that user interaction, which is the primary limiting factor. The affected component must be the Jotform AI Chatbot WordPress plugin at a vulnerable version on a reachable site; the description does not specify whether a particular chatbot feature, form field, or configuration is required, so the exact injection point is not confirmed from available data.

This is a medium-to-high severity reflected/client-side Cross-Site Scripting flaw (CVSS 7.1, CWE-79) in the Jotform - AI Chatbot WordPress plugin, reported by Patchstack. The CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L indicates a network-reachable, low-complexity, unauthenticated vector (PR:N) that nonetheless REQUIRES user interaction (UI:R) - a victim must click a crafted link or load attacker-influenced content - which materially lowers real-world exploitability compared to a zero-click bug. The scope change (S:C) reflects that injected script executes in the victim's browser session rather than the server, and the Low/Low/Low impact triad is consistent with script-context compromise (session/cookie theft, limited content manipulation) rather than full server takeover. No EPSS score, CISA KEV listing, POC, or SSVC decision data was provided in the input, so no public exploit is identified at time of analysis and there is no signal of active or automatable exploitation. Net assessment: a legitimate issue to patch on affected WordPress sites, but the mandatory user-interaction requirement and absence of any exploitation evidence place it below drop-everything priority - it is a standard-cadence patch item rather than an emergency, pending any future KEV/EPSS movement. Note: 'unauthenticated' (PR:N) applies to the attacker triggering the payload, but the Patchstack-classed XSS still depends on luring a user, so model risk around the interaction requirement, not raw network reach.

An attacker crafts a malicious URL or input that reaches the vulnerable Jotform AI Chatbot plugin (<= 3.8.2) and tricks a site visitor or administrator into clicking it or viewing the affected page. When the page renders, the unsanitized payload executes JavaScript in the victim's browser session, enabling session cookie theft, UI manipulation, or actions in the victim's authenticated context. No public exploit code was identified at time of analysis, and successful exploitation depends on the victim interacting with the attacker-supplied content (UI:R).