CVE-2026-39502 Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions

Description

Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.

Affected products and versions

Product	Affected versions	Fixed in
Form Maker by 10Web 1.15	earliest → 1.15.38	No fix stated

Other CVEs of Form Maker by 10Web

The 4 CVEs of Form Maker by 10Web →

CVE-2026-66616 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker… 7.1 High CVE-2026-28184 Subscriber SQL Injection in Form Maker by 10Web <= 1.15.44 versions 8.5 High CVE-2025-48341 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker… 5.9 Medium