Read the docs

Validformbuilder

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Validformbuilder records in CISA KEV

No Validformbuilder vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Validform Builder · all components

Priority MEDIUM 45

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in fil…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01621 Published 2018-02-09 No fix listed CWE-502
Open these records in search →