Skip to content
OpenAdvisories

Package · NuGet

Umbraco.Forms

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.1
    GHSA-7jxj-rpx7-ph2c

    Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp

    ### Impact Protected files uploaded through Umbraco Forms may be served to unauthenticated users when a CDN or caching layer is present and ImageSharp processes the request. ImageSharp sets aggressive cache headers by default, which can cause intermediary cac…

    Umbraco.Forms NuGet
  • Low 2.3
    CVE-2025-47280

    Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow

    Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email mes…

    umbraco Umbraco.Forms.Issues Umbraco.Forms UmbracoForms NuGet
  • Low 2.7
    CVE-2024-35239

    Stored Cross-site Scripting on Components of Umbraco Forms

    Umbraco Commerce is an open source dotnet web forms solution. In affected versions an authenticated user that has access to edit Forms may inject unsafe code into Forms components. This issue can be mitigated by configuring TitleAndDescription:AllowUnsafeHtml…

    umbraco Umbraco.Forms.Issues Umbraco.Forms NuGet