Formbricks vulnerabilities

CVEs whose affected-version data names the Formbricks package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-105090Medium· 5.1

today

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Cu…

▾ SunlitFormbricks · Formbricksvia NVD