Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-24752

Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting

Description

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user into executing arbitrary JavaScript code. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kiteworks Secure Data Forms

  • < 9.3.0affected

References