SF
Product
Smart Forms – when you need more than just a contact form
3
CVEs
0
On KEV
7.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Smart Forms – when you need more than just a contact form to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-95816 | 7.2 | Oct 14 | Smart Forms <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting via 'formString' Parameter Affected: through 2.6.104 |
| CVE-2025-5055 | 4.4 | May 24 | Smart Forms <= 2.6.98 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: through 2.6.98 |
| CVE-2026-2022 | 4.3 | Feb 14 | Smart Forms <= 2.6.99 - Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure Affected: through 2.6.99 |
Showing 3