formcms vulnerabilities

CVEs whose affected-version data names the formcms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-56236Medium· 6.1

1y ago

FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature

FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged …

▾ Sunlitformcms · formcmsEPSS 0.21%via NVD