Skip to content
OpenAdvisories

Product · umbraco

Umbraco.Forms.Issues

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2025-47280

    Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow

    Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email mes…

    umbraco Umbraco.Forms.Issues Umbraco.Forms UmbracoForms NuGet
  • Low 2.7
    CVE-2024-35239

    Stored Cross-site Scripting on Components of Umbraco Forms

    Umbraco Commerce is an open source dotnet web forms solution. In affected versions an authenticated user that has access to edit Forms may inject unsafe code into Forms components. This issue can be mitigated by configuring TitleAndDescription:AllowUnsafeHtml…

    umbraco Umbraco.Forms.Issues Umbraco.Forms NuGet