10web form maker

Name: 10web form maker
Brand: 10web

productUS

cpe:2.3:a:10web:form_maker:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical3high11medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-10866US	critical9.8	6.21% (93rd)	Exploit	1.13.3	2019-05-23	< 1.13.3
CVE-2023-4666US	critical9.8	3.78% (90th)	—	1.15.20	2023-10-16	< 1.15.20
CVE-2022-3300US	high7.2	1.37% (72nd)	—	1.15.6	2022-10-25	< 1.15.6
CVE-2019-11590US	high8.8	1.17% (67th)	—	1.13.5	2019-04-29	< 1.13.5
CVE-2021-24526US	medium5.4	1.09% (65th)	—	1.13.60	2021-08-16	< 1.13.60
CVE-2022-1564US	medium4.8	1.05% (64th)	—	no fix	2022-05-30	≤ 1.14.12
CVE-2024-2112US	high7.5	0.70% (53rd)	—	1.15.23	2024-04-09	< 1.15.23
CVE-2024-34437US	medium4.8	0.44% (38th)	—	1.15.25	2024-05-14	< 1.15.25
CVE-2024-6130US	—	0.44% (38th)	—	1.15.26	2024-07-01	< 1.15.26
CVE-2024-10562US	—	0.43% (37th)	—	1.15.31	2025-01-07	< 1.15.31
CVE-2023-45070US	medium6.1	0.41% (35th)	—	1.15.19	2023-10-18	< 1.15.19
CVE-2024-10265US	—	0.40% (34th)	—	1.15.31	2024-11-10	< 1.15.31
CVE-2023-45071US	medium6.1	0.38% (32nd)	—	1.15.19	2023-10-18	< 1.15.19
CVE-2023-48290US	medium5.3	0.37% (31st)	—	1.15.21	2024-06-04	< 1.15.21
CVE-2024-13605US	—	0.36% (30th)	—	1.15.33	2025-02-24	< 1.15.33
CVE-2024-2258US	medium5.4	0.36% (29th)	—	1.15.25	2024-04-27	< 1.15.25
CVE-2024-8633US	medium4.8	0.34% (27th)	—	1.15.28	2024-09-26	< 1.15.28
CVE-2024-32534US	medium4.8	0.34% (27th)	—	1.15.24	2024-04-17	< 1.15.24
CVE-2024-13053US	—	0.33% (25th)	—	1.15.33	2025-05-15	< 1.15.33
CVE-2024-10560US	—	0.32% (25th)	—	1.15.30	2025-03-25	< 1.15.30
CVE-2024-43220US	medium6.1	0.31% (23rd)	—	1.15.27	2024-08-12	< 1.15.27
CVE-2024-10680US	—	0.27% (19th)	—	1.15.32	2025-04-16	< 1.15.32
CVE-2024-10558US	—	0.27% (19th)	—	1.15.30	2025-03-24	< 1.15.30
CVE-2024-0667US	medium6.3	0.23% (13th)	—	no fix	2024-01-27	≤ 1.15.21

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')17 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-1078Inappropriate Source Code Style or Formatting1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan