Advisories · Technology
edgarrojas Smart Forms – when you need more than just a contact form.
Every CVE that names edgarrojas Smart Forms – when you need more than just a contact form among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Smart Forms <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting via 'formString' Parameter
- edgarrojas Smart Forms – when you need more than just a contact form
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Smart Forms <= 2.6.99 - Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure
- edgarrojas Smart Forms – when you need more than just a contact form
- Broken access control
- CVSS 4.4 Medium
Smart Forms <= 2.6.98 - Authenticated (Admin+) Stored Cross-Site Scripting
- edgarrojas Smart Forms – when you need more than just a contact form
- Cross-site scripting (XSS)