Skip to content
OpenAdvisories

Vendor

formbricks

3 known vulnerabilities.

Products

formbricks 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-110620

    Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationId

    Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify resource ownership against the supplied organizationId. Authenticated owners or managers of any organiz…

    formbricks formbricks
  • Medium 5.1
    CVE-2026-105090

    Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enfo…

    formbricks formbricks