Skip to content
OpenAdvisories

Vendor

heyform

6 known vulnerabilities.

Products

heyform 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-35198

    HeyForm vulnerable to stored XSS via form field titles

    HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, a stored cross-site scripting (XSS) vulnerability in the form builder allows a low-privileged team member to inject malicious JavaScript that executes when a team owner views the form, leadi…

    heyform heyform