7.1
High
CVE-2026-66616 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.49.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Form Maker by 10Web 1.15 | earliest → 1.15.49 | No fix stated |
Other CVEs of Form Maker by 10Web
The 4 CVEs of Form Maker by 10Web →
CVE-2026-28184
Subscriber SQL Injection in Form Maker by 10Web <= 1.15.44 versions
8.5
High
CVE-2026-39502
Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions
9.3
Critical
CVE-2025-48341
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker…
5.9
Medium