CVE-2018-1000059

CRITICAL 9.8CVE-2018-1000059 · Published 09/02/2018 · updated 17/06/2026

In short

CVE-2018-1000059 is a CRITICAL (CVSS 9.8) vulnerability affecting validform builder (validformbuilder).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
validform builder validformbuilder	`= 4.5.4`	No fix yet

Description

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system.

References

validformbuilder/validformbuilder · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free