CNNVD-202510-1182 Information

CNNVD ID

CNNVD-202510-1182

CVE-2025-11437

  • CNNVD Published: 2025-10-08

Description (Chinese)

OpnForm是Julien Nahum个人开发者的一个表单生成器。 OpnForm 1.9.3及之前版本存在代码注入漏洞,该漏洞源于对文件/api/open/forms中组件Form Editor的错误操作,可能导致跨站脚本攻击。

Description (English)

OpnForm is a form generator for Julien Nahum personal developers. OpnForm 1.9.3 and previous versions contain code-injecting holes, which stem from the error of the Form Editor component of document/api/open/forms, which may result in a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

个人开发者

Published

2025-10-08

Last Modified

2026-02-24

References

https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/edit?tab=t.0#heading=h.nowv0hlgdq8 https://vuldb.com/?ctiid.327374 https://vuldb.com/?id.327374 https://vuldb.com/?submit.666878

Patch

https://opnform.com/

Share on: