All products

getformwork/formwork

Composer · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
formwork Cross-site scripting vulnerability in Markdown fieldsCVE-2024-35621 · GHSA-GX8M-F3MP-FG99 getformwork/formwork Composer Medium Fix reported
Formwork Improperly Managed Privileges in User creationCVE-2026-27198 · GHSA-34P4-7W83-35G2 getformwork/formwork Composer High Fix reported
Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog TagsCVE-2025-65956 · GHSA-7J46-F57W-76PJ getformwork/formwork Composer Medium Fix reported
Formwork improperly validates input of User role preventing site and panel availabilityGHSA-C85W-X26Q-CH87 getformwork/formwork Composer High Fix reported
Cross-site scripting (XSS) vulnerability in Description metadataCVE-2024-37160 · GHSA-5PXR-7M4J-JJC6 getformwork/formwork Composer Medium Fix reported
Formwork has a cross-site scripting (XSS) vulnerability in Site titleGHSA-VF6X-59HH-332F getformwork/formwork Composer Medium Fix reported
Formwork Cross-site Scripting (XSS) from Page title fieldCVE-2023-24230 · GHSA-FVRH-WRPF-6Q7H getformwork/formwork Composer Medium Fix reported