CVE-2021-34676

HIGH

NEX-Forms < 7.8.7 - Authentication Bypass via Excel Report Generation

Title source: llm
STIX 2.1

Description

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.

References (2)

Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/

Scores

CVSS v3 7.5
EPSS 0.0182
EPSS Percentile 76.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-287
Status published
Products (1)
basixonline/nex-forms < 7.8.7
Published Jul 19, 2021
Tracked Since Feb 18, 2026