Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Formcms Component: Formcms Clear all filters
TI-2025-35182 CVE-2025-55797 · GHSA-6cwx-42hw-w69c

An improper access control vulnerability in FormCms v0.5.4 in the…

Priority LOW 29

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00328 Published 2025-09-30 Fixed in 0.5.5 CWE-284