CVE-2025-32427

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who hav...

CVE-2025-32427

creationtimestamp| type| source ---|---|--- 2025-04-11 13:51:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11421 2025-04-11 17:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkkp6fxex2z 2025-04-11 18:07:48+00:00| seen|...

CVE-2025-32427 Formie has a XSS vulnerability for importing forms

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who hav...