Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, an authenticated attacker could exploit an Improper Neutraliza…

Kiteworks Secure Data Forms prior to version 9.2.1 contains a stored cross-site scripting (XSS) vulnerability. An authenticated attacker can exploit improper neutralization of input during web page generation when modifying forms. The vulnerability allows for stored XSS attacks through form modification functionality. Kiteworks is described as a private data network (PDN) platform. Users should upgrade to version 9.2.1 or later to receive the security patch. The vulnerability is tracked as CVE-2026-24750 and has been assigned a high criticality rating.