9.8
Critical
CVE-2026-110886 Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms…
Description
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Conversational Forms for ChatBot 1.5 | earliest → 1.5.1 | No fix stated |
Other CVEs of Conversational Forms for ChatBot
The 6 CVEs of Conversational Forms for ChatBot →
CVE-2026-95531
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions
8.8
High
CVE-2024-32729
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud…
7.5
High
CVE-2025-22813
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud…
6.5
Medium
CVE-2024-34380
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud…
5.9
Medium