TI-2026-19909 CVE-2026-24687 · GHSA-hm5p-82g6-m3xh
Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac
Priority LOW 27
Umbraco Forms is a form builder that integrates with the Umbraco content management system.
Vulnerabilities
7 records
TI-2025-42380 CVE-2025-68924 · GHSA-vrgw-pc9c-qrrc
Deserialization of untrusted data in umbraco Forms
Priority LOW 36
In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for remote code execution.
TI-2025-29810 CVE-2025-47280 · GHSA-2qrj-g9hq-chph
Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow
Priority LOW 12
Umbraco Forms is a form builder that integrates with the Umbraco content management system.
TI-2025-16851 CVE-2025-23041 · GHSA-9v8m-qv22-f268
Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms
Priority LOW 32
Umbraco.Forms is a web form framework written for the nuget ecosystem.
TI-2024-23308 CVE-2024-35239 · GHSA-p572-p2rj-q5f4
Stored Cross-site Scripting on Components of Umbraco Forms
Priority LOW 24
Umbraco Commerce is an open source dotnet web forms solution.
TI-2021-12768 CVE-2021-33224 · GHSA-74cc-qrjm-qwjc
File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to…
Priority MEDIUM 50
File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file.
TI-2020-06205 CVE-2020-7685 · GHSA-8m73-w2r2-6xxj
Insecure Defaults
Priority LOW 35
This affects all versions of package UmbracoForms.