Formcms - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2025-09-30.

Products

• Formcms - 2 CVEs

Newest CVEs of Formcms

• CVE-2025-55797 - CVSS 6.5 (medium), 2025-09-30: An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access…
• CVE-2025-56236 - CVSS 6.1 (medium), 2025-08-28: FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature. Authenticated users can upload .html files containing…