cleantalk
Vulnerabilities and Security Researches

NEX-Forms – Ultimate Form Builder – Contact forms and much more, CVE-2025-49399

CVE, Research URL

CVE-2025-49399

Published on
Aug 20, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in Basix NEX-Forms allows Cross Site Request Forgery. This issue affects NEX-Forms: from n/a through 9.1.3.
Affected versions
Min -, max 9.1.4.
Status
vulnerable