Skip to content

priyanshuchaudhary FlowForms – Conversational Form Builder

CVE-2026-12400 Medium 4.3 FlowForms <= 1.1.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Form Modification via REST API '/flowforms/v1/forms/{id}' Endpoints 0.4%