Known Vulnerabilities for Iws-geo-form-fields by Iws-geo-form-fields Project
Listed below are 1 of the newest known vulnerabilities associated with "Iws-geo-form-fields" by "Iws-geo-form-fields Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65603 json | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated profile... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-65052 json | Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthe... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-63428 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id, name... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-57256 json | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this ope... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-57250 json | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying na... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-57237 json | When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-56422 json | Multiple MISP core controllers and model capture paths accepted client-controlled request fields such as primary keys (id) an... | Not Provided | 2026-06-22 | 2026-06-22 |
| CVE-2026-56354 json | n8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site scripting and open redirect vul... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-55603 json | http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequestBody() is the library's d... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-54283 json | Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_siz... | Not Provided | 2026-06-22 | 2026-06-23 |