Skip to content
OpenAdvisories

Vendor

getformwork

6 known vulnerabilities.

Products

Formwork 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-82451

    Formwork < 2.3.11 Stored XSS via Referer Header

    Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browser…

    getformwork Formwork
  • Medium 6.5
    CVE-2025-65956

    Formwork CMS Has a Stored Cross-Site Scripting (XSS) Vulnerability in Blog Tags

    Formwork is a flat file-based Content Management System (CMS). Prior to version 2.2.0, inserting unsanitized data into the blog tag field results in stored cross‑site scripting (XSS). Any user with credentials to the Formwork CMS who accesses or edits an affe…

    getformwork Formwork getformwork/formwork Packagist
  • Medium 4.8
    CVE-2024-37160

    Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata

    Formwork is a flat file-based Content Management System (CMS). An attackers (requires administrator privilege) to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visit…

    getformwork Formwork getformwork/formwork Packagist