solspace

Products

ProductCVEsExploitedLatest
craft-freeform2–Sep 23, 2026

Exploited and recent CVEs

  • CVE-2026-73858 Medium 5.3 Solspace Freeform: Limited Twig template injection via submitted field values 0.5%
  • CVE-2026-26188 Medium 5.1 Solspace Freeform plugin affected by Stored Cross-Site Scripting (XSS) in Freeform Craft Plugin CP UI (builder/integrations) 0.3%