Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: solspace Component: Freeform Clear all filters
TI-2026-21179 CVE-2026-26188 · GHSA-jp3q-wwp3-pwv9

Cross-site scripting in solspace craft-freeform

Priority MEDIUM 56

Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00308 Published 2026-02-12 Fixed in 5.14.7 CWE-79
TI-2025-32483 CVE-2025-52122 · GHSA-9hp3-f5g8-rccg

Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template…

Priority HIGH 82

Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0061 Published 2025-08-27 Fixed in 5.10.16 CWE-1336