Read the docs

solspace

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

solspace records in CISA KEV

No solspace vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Freeform 2 records HIGH

Records

2 records in Freeform · all components

TI-2025-32483 CVE-2025-52122 · GHSA-9hp3-f5g8-rccg

Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template…

Priority HIGH 82

Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0061 Published 2025-08-27 Fixed in 5.10.16 CWE-1336
TI-2026-21179 CVE-2026-26188 · GHSA-jp3q-wwp3-pwv9

Cross-site scripting in solspace craft-freeform

Priority MEDIUM 56

Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00301 Published 2026-02-12 Fixed in 5.14.7 CWE-79
Open these records in search →