Formwork Project Formwork
4 CVEs affecting Formwork Project Formwork. Latest disclosed: 2026-02-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-27198 | High | 8.8 | 2026-02-21 | Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorizat… |
CVE-2025-65956 | Medium | 6.5 | 2025-11-26 | Formwork is a flat file-based Content Management System (CMS). Prior to version 2.2.0, inserting unsanitized data into the blog tag field results in stored cro… |
CVE-2024-37160 | Medium | 4.8 | 2024-06-07 | Formwork is a flat file-based Content Management System (CMS). An attackers (requires administrator privilege) to execute arbitrary web scripts by modifying si… |
CVE-2023-24230 | Medium | 4.8 | 2023-02-10 | A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scri… |