Skip to content
OpenAdvisories

Package · NuGet

Umbraco.Forms

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-24687

    Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac

    Umbraco Forms is a form builder that integrates with the Umbraco content management system. It's possible for an authenticated backoffice-user to enumerate and traverse paths/files on the systems filesystem and read their contents, on Mac/Linux Umbraco instal…

    umbraco Umbraco.Forms.Issues Umbraco.Forms NuGet
  • Medium 5.8
    CVE-2025-23041

    Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms

    Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This issue has been patched in versions 8.13.16, 10.5.7, 13.2.2, an…

    umbraco Umbraco.Forms.Issues Umbraco.Forms UmbracoForms NuGet