Known Vulnerabilities for Forms by Nextcloud
Listed below are 1 of the newest known vulnerabilities associated with "Forms" by "Nextcloud".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120190 json | A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionalit... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-118990 json | CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a c... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-118337 json | Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin polic... | Not Provided | 2026-10-27 | 2026-10-30 |
| CVE-2026-118256 json | Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling escapePa... | Not Provided | 2026-10-28 | 2026-10-30 |
| CVE-2026-116825 json | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-115807 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | Not Provided | 2026-10-24 | 2026-10-29 |
| CVE-2026-115700 json | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent-enco... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-115479 json | baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visito... | Not Provided | 2026-10-23 | 2026-10-30 |
| CVE-2026-115301 json | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the template engine used to render its forms a... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-115183 json | The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding ... | Not Provided | 2026-10-25 | 2026-10-26 |