7.1
Élevée
CVE-2026-66616 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.49.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Form Maker by 10Web 1.15 | premières → 1.15.49 | Pas de correctif indiqué |
Autres CVE de Form Maker by 10Web
Les 4 CVE de Form Maker by 10Web →
CVE-2026-28184
Subscriber SQL Injection in Form Maker by 10Web <= 1.15.44 versions
8.5
Élevée
CVE-2026-39502
Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions
9.3
Critique
CVE-2025-48341
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker…
5.9
Moyenne