Known Vulnerabilities for Form Builder by Cmsmadesimple
Listed below are 3 of the newest known vulnerabilities associated with "Form Builder" by "Cmsmadesimple".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77115 json | Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without esca... | Not Provided | 2026-08-23 | 2026-08-23 |
| CVE-2026-67364 json | Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Cri... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-66425 json | Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom ... | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-63429 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no globa... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-63428 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id, name... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-60027 json | The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticat... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-59517 json | Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions. | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-57668 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-for... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-49213 json | TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqU... | Not Provided | 2026-07-10 | 2026-07-13 |
| CVE-2026-45797 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the `/api/upload` endpoint allows unauthenticated file u... | Not Provided | 2026-07-20 | 2026-07-20 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cmsmadesimple | Form Builder | 1.0.2 | |||
| Application | Cmsmadesimple | Form Builder | 1.0.1 | |||
| Application | Cmsmadesimple | Form Builder | 1.0 | |||
| Application | Cmsmadesimple | Form Builder | 0.8.1.6 | |||
| Application | Cmsmadesimple | Form Builder | 0.8.1.5 | |||
| Application | Cmsmadesimple | Form Builder | 0.8.1.4 | |||
| Application | Cmsmadesimple | Form Builder | 0.8.1.3 | |||
| Application | Cmsmadesimple | Form Builder | 0.8.1.2 | |||
| Application | Cmsmadesimple | Form Builder | 0.8.1.1 | |||
| Application | Cmsmadesimple | Form Builder | 0.8.1 | |||
| Application | Cmsmadesimple | Form Builder | 0.8 | |||
| Application | Cmsmadesimple | Form Builder | 0.7.4 | |||
| Application | Cmsmadesimple | Form Builder | 0.7.3 | |||
| Application | Cmsmadesimple | Form Builder | 0.7.2 | |||
| Application | Cmsmadesimple | Form Builder | 0.7.1 | |||
| Application | Cmsmadesimple | Form Builder | 0.7 | |||
| Application | Cmsmadesimple | Form Builder | 0.6b2 | |||
| Application | Cmsmadesimple | Form Builder | 0.6b1 | |||
| Application | Cmsmadesimple | Form Builder | 0.6.4 | |||
| Application | Cmsmadesimple | Form Builder | 0.6.3 |