Formcms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Formcms records in CISA KEV

No Formcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Formcms 2 records LOW

Records

2 records in Formcms · all components

TI-2025-35182 CVE-2025-55797 · GHSA-6cwx-42hw-w69c

An improper access control vulnerability in FormCms v0.5.4 in the…

LOW 29

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00328 Published 2025-09-30 Fixed in 0.5.5 CWE-284

TI-2025-35286 CVE-2025-56236 · GHSA-4fxf-xgrm-8fcj

FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar…

LOW 27

FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00203 Published 2025-08-28 Fixed in 0.5.7 CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0