CNNVD-202510-1184 Information

CNNVD ID

CNNVD-202510-1184

CVE-2025-11435

  • CNNVD Published: 2025-10-08

Description (Chinese)

OpnForm是Julien Nahum个人开发者的一个表单生成器。 OpnForm 1.9.3及之前版本存在代码注入漏洞,该漏洞源于文件/show/submissions存在跨站脚本攻击。

Description (English)

OpnForm is a form generator for Julien Nahum personal developers. OpnForm 1.9.3 and previous versions had a code injection loophole, which originated from the cross-site script attack in the file/show/submissions.

Hazard Level

High

Vulnerability Type

代码注入

Affected Vendor

个人开发者

Published

2025-10-08

Last Modified

2026-02-24

References

https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/edit?usp=sharing https://github.com/JhumanJ/OpnForm/pull/900/commits/a2af1184e53953afa8cb052f4055f288adcaa608 https://vuldb.com/?ctiid.327372 https://vuldb.com/?id.327372 https://vuldb.com/?submit.666876

Patch

https://opnform.com/

Share on: