Known Vulnerabilities for Form Builder CP by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "Form Builder CP" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63429 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no globa... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-63428 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id, name... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-60027 json | The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticat... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-59517 json | Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions. | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-57668 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-for... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-49213 json | TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqU... | Not Provided | 2026-07-10 | 2026-07-13 |
| CVE-2026-45797 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the `/api/upload` endpoint allows unauthenticated file u... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-45622 json | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the... | Not Provided | 2026-05-15 | 2026-05-15 |
| CVE-2026-42747 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy For... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-39970 json | TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.typebot.i... | Not Provided | 2026-05-22 | 2026-05-22 |