CVE-2022-38400: Synck Mailform Pro Cgi

Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days.

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.

Affected products

• Synck Mailform Pro Cgi: up to and including 4.3.1

Published 2022-09-08. Last modified 2026-06-17.