CVE-2025-55797

An improper access control vulnerability exists in FormCMS version 0.5.4 within the /api/schemas/history/[schemaId] endpoint. The root cause is insufficient authentication checks , which allows unauthenticated attackers to retrieve sensitive historical schema data if a valid schemaId is known or ...