A Cross-Site Scripting (XSS) vulnerability exists in Crocoblock JetFormBuilder up to version 3.6.8 due to improper neutralization of script-related HTML tags. This vulnerability allows an attacker to inject code that could be executed in the context of a user's browser. The vulnerability has a medium severity score of 5.3 and does not require user interaction or privileges to exploit.