Skip to content
OpenAdvisories

Package · NuGet

FormCMS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2025-55797

    FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

    An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.

    FormCMS NuGet
  • Medium 6.1
    CVE-2025-56236

    FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability

    FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged user accesses the file…

    FormCMS NuGet