Advisories · Technology
MetForm.
Every CVE that names MetForm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
MetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes
- MetForm
- Other injection
- CVSS 3.7 Low
MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration
- MetForm
- Information disclosure
- CVSS 5.3 Medium
MetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API
- MetForm
- Information disclosure
- CVSS 4.8 Medium
MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To
- MetForm
- Other injection