Simple Multi Step Form Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Simple Multi Step Form Project products: 1 record(s), with severity, exploitation and fixes.

Simple Multi Step Form 1

Exploited only (KEV) →

CVE-2025-12761 Low · 3.5 CWE-79 Nov 18, 2025

Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple multi step form allows Cross-Site Scripting (XSS).This issue affects Simple multi step form: from 0.0.0 before 2.0.0.