Skip to content
OpenAdvisories

Package · NuGet

UmbracoForms

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2025-23041

    Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms

    Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This issue has been patched in versions 8.13.16, 10.5.7, 13.2.2, an…

    umbraco Umbraco.Forms.Issues Umbraco.Forms UmbracoForms NuGet
  • Medium 5.4
    CVE-2020-7685

    Insecure Defaults

    This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom wo…

    UmbracoForms NuGet