CVE-2018-1000059
ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system.
CVSS 3.0 · 9.8 Critical
EPSS 1.6%
KEV · Not listed
Vendors
Products