Formwork Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-82451

    Formwork < 2.3.11 Stored XSS via Referer Header

    Last Modified: Sep 03, 2026
    Published: Aug 29, 2026

    CVE-2026-27198

    Formwork Improperly Manages Privileges During User Creation

    Last Modified: Apr 17, 2026
    Published: Feb 21, 2026

    CVE-2025-65956

    Formwork CMS Has a Stored Cross-Site Scripting (XSS) Vulnerability in Blog Tags

    Last Modified: Dec 03, 2025
    Published: Nov 25, 2025

    CVE-2024-37160

    Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata

    Last Modified: Nov 21, 2024
    Published: Jun 07, 2024

    CVE-2023-24230

    A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page title parameter.

    Last Modified: Mar 24, 2025
    Published: Feb 10, 2023
    Items Per Page
    Formwork_Project Vulnerabilities & Security CVEs | CVE-DB