TI-2025-40524 CVE-2025-65956 · GHSA-7j46-f57w-76pj
Formwork CMS Has a Stored Cross-Site Scripting (XSS) Vulnerability in Blog Tags
Priority MEDIUM 62
Formwork is a flat file-based Content Management System (CMS).
getformwork
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
getformwork records in CISA KEVNo getformwork vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Formwork · all components
TI-2023-09940 CVE-2023-24230 · GHSA-fvrh-wrpf-6q7h
A stored cross-site scripting (XSS) vulnerability in the component…
Priority MEDIUM 55
A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page titl…
TI-2026-21635 CVE-2026-27198 · GHSA-34p4-7w83-35g2
Formwork Improperly Manages Privileges During User Creation
Priority MEDIUM 40
Formwork is a flat file-based Content Management System (CMS).
TI-2024-24687 CVE-2024-37160 · GHSA-5pxr-7m4j-jjc6
Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata
Priority LOW 22
Formwork is a flat file-based Content Management System (CMS).