Skip to content
OpenAdvisories

Package · Packagist

solspace/craft-freeform

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    GHSA-rwr8-xrpw-9qf5

    solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets

    ### Summary The latest versions of both 4.x and 5.x are using Axios versions < 1.7.5 and as such are subject to known vulnerabilities as per: https://security.snyk.io/package/npm/axios ### Details We've had this flagged up in a pen test, which indicates the i…

    solspace/craft-freeform Packagist
  • Low —
    GHSA-44jg-mv3h-wj6g

    solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data

    ### Summary _Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server._ \PhpOffice\PhpSpreadsheet\Writer\Html …

    solspace/craft-freeform Packagist
  • Low —
    GHSA-58q2-9x27-h2jm

    solspace/craft-freeform Has a DoS Vulnerability

    ### Summary Freeform plugin v4.1.29 uses vulnerable Axios ^1.7.7 allowing unauthenticated attackers to crash servers via malicious data: URIs causing memory exhaustion (CVE-2025-58754). Freeform version: 4.1.29 Craft CMS version: 4.16.8 ### Impact When Axios …

    solspace/craft-freeform Packagist