Ggetformwork

Products

Exploited and recent CVEs

• CVE-2026-105950 Low 3.5 getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting 0.2%
• CVE-2026-104478 High 7.1 Formwork before 2.3.13 Path Traversal via BackupController Download and Delete 0.4%
• CVE-2026-82451 Medium 6.1 Formwork < 2.3.11 Stored XSS via Referer Header 0.4%
• CVE-2026-27198 High 8.8 Formwork Improperly Manages Privileges During User Creation 0.5%
• CVE-2025-65956 Medium 6.5 Formwork CMS Has a Stored Cross-Site Scripting (XSS) Vulnerability in Blog Tags 0.2%
• CVE-2024-37160 Medium 4.8 Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata 0.5%