HIGH8.8Packagist
GHSA-34p4-7w83-35g2· CVE-2026-27198Formwork Improperly Managed Privileges in User creation
Modified: 2/23/2026
package
Packagist/getformwork/formwork
pkg:packagist/getformwork/formwork
MEDIUM4.8Packagist
GHSA-5pxr-7m4j-jjc6· CVE-2024-37160Cross-site scripting (XSS) vulnerability in Description metadata
Modified: 2/22/2026
MEDIUM6.5Packagist
GHSA-7j46-f57w-76pj· CVE-2025-65956Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags
Modified: 2/22/2026
HIGH8.2Packagist
GHSA-c85w-x26q-ch87Formwork improperly validates input of User role preventing site and panel availability
Modified: 2/22/2026
MEDIUM4.8Packagist
GHSA-fvrh-wrpf-6q7h· CVE-2023-24230Formwork Cross-site Scripting (XSS) from Page title field
Modified: 5/28/2024
MEDIUM4.8Packagist
GHSA-gx8m-f3mp-fg99· CVE-2024-35621formwork Cross-site scripting vulnerability in Markdown fields
Modified: 7/8/2026
MEDIUM4.7Packagist
GHSA-vf6x-59hh-332fFormwork has a cross-site scripting (XSS) vulnerability in Site title
Modified: 2/18/2026