Skip to content

BrainStormForce SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

CVE-2026-18406 High 7.2 SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload 0.5%
CVE-2026-7623 Medium 6.4 SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attribute 0.4%