Funnel Builder by FunnelKit vulnerabilities

2 known vulnerabilities in Funnel Builder by FunnelKit from FunnelKit. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Funnel Builder by FunnelKit: Improper Neutralization of Input During Web Page Generation

  CVE-2026-57816Jul 13, 2026FunnelKit

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.15.0.8.

• 7.6 High severity

  Funnel Builder by FunnelKit: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-56052Jun 24, 2026FunnelKit

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5.