Vulnerabilities > Html Quickform Project > Html Quickform

DATE CVE VULNERABILITY TITLE RISK
2018-07-23 CVE-2018-1999022 Code Injection vulnerability in multiple products
PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in HTML_QuickForm's getSubmitValue method, HTML_QuickForm's validate method, HTML_QuickForm_hierselect's _setOptions method, HTML_QuickForm_element's _findValue method, HTML_QuickForm_element's _prepareValue method.
network
low complexity
html-quickform-project civicrm CWE-94
7.5
7.5