CVE-2026-95531 Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions

Description

Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
Conversational Forms for ChatBot 1.5	earliest → 1.5.0	No fix stated

Other CVEs of Conversational Forms for ChatBot

The 6 CVEs of Conversational Forms for ChatBot →

CVE-2026-110886 Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms… 9.8 Critical CVE-2024-32729 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud… 7.5 High CVE-2025-22813 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud… 6.5 Medium CVE-2024-34380 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud… 5.9 Medium