CVE-2026-66616: 10web Form Maker By 10web

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.49.

Affected products

• 10web Form Maker By 10web: up to and including 1.15.49

Published 2026-08-20. Last modified 2026-10-06.