CVE-2026-27198 Formwork Improperly Manages Privileges During User Creation

Formwork is a flat file-based Content Management System CMS. In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has...

Formwork security vulnerabilities

Formwork is an open-source content management system CMS developed by Formwork. It is used to build and manage simple websites. Versions 2.0.0 to 2.3.3 of Formwork have security vulnerabilities. These vulnerabilities stem from improper role-based authorization during account creation, which may...

Formwork security vulnerabilities

Formwork is a flat file based content management system CMS from Formwork open source. It is used to build and manage simple websites. A security vulnerability exists in formwork versions prior to 1.13.0, which stems from a cross-site scripting XSS vulnerability in the Content field...