Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior

Críticas / altas1379▲ 45 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-95531	Aplazada	Alta (8.8)	0.48%	—	Quantumcloud Conversational Forms FOR Chatbot^AI	30/9/2026	30/9/2026	Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
CVE-2024-32729	Aplazada	Alta (7.5)	0.43%	—	Quantumcloud Conversational Forms FOR Chatbot^AI	17/6/2026	1/10/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8.
CVE-2025-22813	Aplazada	Media (6.5)	0.23%	—	Quantumcloud Conversational Forms FOR Chatbot^AI	9/1/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through <= 1.4.2.
CVE-2024-34380	Aplazada	Media (6.5)	0.35%	—	Quantumcloud Conversational Forms FOR Chatbot^AI	6/5/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud Conversational Forms for ChatBot allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through 1.2.0.
CVE-2023-23981	Modificada	Media (4.8)	0.39%	—	Quantumcloud Conversational Forms FOR Chatbot	6/4/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions.