90 matches found
Formwork CMS 2.3.12 Cross Site Scripting
Formwork CMS versions 2.0.0 through 2.3.12 contain a stored cross site scripting vulnerability in the URI sanitizer. An authenticated page editor can use an unsanitized formaction JavaScript URI in raw Markdown HTML to execute script when a visitor activates the crafted control...
EUVD-2026-91854
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...
CVE-2026-104478
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...
CVE-2026-104478: Improper Limitation of a Pathname to a Restricted Directory
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...
CVE-2026-104478 Formwork before 2.3.13 Path Traversal via BackupController Download and Delete
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...
CVE-2026-104478 Formwork before 2.3.13 Path Traversal via BackupController Download and Delete
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...
CVE-2026-104478
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...
CVE-2026-104478 Formwork before 2.3.13 Path Traversal via BackupController Download and Delete
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...
CVE-2026-104478
Formwork versions prior to 2.3.13 are vulnerable to a path traversal vulnerability in the BackupController component. Authenticated panel users with backup download or delete permissions can exploit this by supplying a base64-encoded backslash-separated traversal payload . This payload bypasses t...
PT-2026-104460
Name of the Vulnerable Software and Affected Versions Formwork versions prior to 2.3.13 Description Authenticated panel users with backup download or delete permissions can read or delete arbitrary files. This occurs in the BackupController when a base64-encoded backslash-separated traversal...
CVE-2026-82451
Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...
CVE-2026-82451
Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...
EUVD-2026-68106
Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...
CVE-2026-82451 Formwork < 2.3.11 Stored XSS via Referer Header
Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...
CVE-2026-82451 Formwork < 2.3.11 Stored XSS via Referer Header
Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...
CVE-2026-82451
Formwork (through version 2.3.14) contains a stored cross-site scripting (XSS) vulnerability in its visit tracking functionality. The root cause is that the Referer header host is recorded unescaped in the statistics data. An unauthenticated attacker can craft a malicious Referer header, which is...
CVE-2026-82451 Formwork < 2.3.11 Stored XSS via Referer Header
Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...
PT-2026-83430
Name of the Vulnerable Software and Affected Versions Formwork versions prior to 2.3.15 Description A stored cross-site scripting issue exists in the visit tracking feature. The system records the host from the Referer header without proper escaping. This allows unauthenticated attackers to injec...
CVE-2026-82451: Improper Neutralization of Input During Web Page Generation
Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...