Advisories · Technology
Visual Form Builder.
Every CVE that names Visual Form Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Visual Form Builder <= 3.1 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget
- Visual Form Builder
- Information disclosure
- CVSS 4.3 Medium
Visual Form Builder <= 3.1 - Subscriber+ Arbitrary Form Field Reordering via Missing Authorization
- Visual Form Builder
- Broken access control
-
Visual Form Builder < 3.0.7 - Admin+ Stored Cross-Site Scripting
- Visual Form Builder
- Cross-site scripting (XSS)
-
Visual Form Builder < 3.0.6 - CSV Injection
- Visual Form Builder
- Other injection
-
Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRF
- Visual Form Builder
- Cross-site request forgery (CSRF)
-
Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure
- Visual Form Builder
-
Visual Form Builder < 3.0.4 - Admin+ Stored Cross-Site Scripting
- Visual Form Builder
- Cross-site scripting (XSS)