Beveiligingsadvies

CVE-2026-35198

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 15:47:21

Laatst bijgewerkt 2026-08-21 19:58:19

Toegewezen door GitHub_M

CVSS-score 9.0

Status PUBLISHED

Beschrijving

HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, a stored cross-site scripting (XSS) vulnerability in the form builder allows a low-privileged team member to inject malicious JavaScript that executes when a team owner views the form, leading to complete account takeover through privilege escalation. Version 3.0.0-rc.7 contains a patch for the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗