Known Vulnerabilities for Forms by Nextcloud
Listed below are 1 of the newest known vulnerabilities associated with "Forms" by "Nextcloud".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77026 json | Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Submiss... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-75952 json | Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3 - Tokens were missing on many A... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-75091 json | The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site ... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74307 json | In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_IOC_M... | Not Provided | 2026-08-15 | 2026-08-17 |
| CVE-2026-74004 json | Subscriber Broken Access Control in Gravity Booster – Styles & Layouts for Gravity Forms <= 6.0 versions. | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-73644 json | OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-... | Not Provided | 2026-08-13 | 2026-08-18 |
| CVE-2026-73532 json | Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served throug... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-73326 json | CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access and mo... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-73212 json | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, good_peer_addr() in src/server/ns_turn_... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-72827 json | Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-pri... | Not Provided | 2026-08-14 | 2026-08-14 |