CI
Product
CiviCRM
by CiviCRM · last CVE Aug 11, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch

Add CiviCRM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1999022
9.8
2%
Jul 23
PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in HTML_QuickForm's getSubmitValue method, HTML_QuickForm's validate method,…
Affected: through 4.6.37; 5.3.0
Showing 1