Getformwork Formwork
4 CVEs affecting Getformwork Formwork. Latest disclosed: 2026-08-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-27198 | High | 8.8 | 2026-02-21 | Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorizat… |
CVE-2025-65956 | Medium | 6.5 | 2025-11-26 | Formwork is a flat file-based Content Management System (CMS). Prior to version 2.2.0, inserting unsanitized data into the blog tag field results in stored cro… |
CVE-2026-82451 | Medium | 6.1 | 2026-08-29 | Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated a… |
CVE-2024-37160 | Medium | 4.8 | 2024-06-07 | Formwork is a flat file-based Content Management System (CMS). An attackers (requires administrator privilege) to execute arbitrary web scripts by modifying si… |