formwork project records

4 published records for vendor formwork project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-27198No exploit	Formwork Improperly Manages Privileges During User Creationformwork project · formwork · CWE-269	High8.8	—	0.5%	Feb 21, 2026
21Monitor	CVE-2025-65956No exploit	Formwork CMS Has a Stored Cross-Site Scripting (XSS) Vulnerability in Blog Tagsformwork project · formwork · CWE-79 XSS	Medium5.4	—	0.2%	Nov 25, 2025
19Monitor	CVE-2023-24230No exploit	A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to executeformwork project · formwork · CWE-79 RCE XSS	Medium4.8	—	0.5%	Feb 10, 2023
19Monitor	CVE-2024-37160No exploit	Formwork has a Cross-site scripting (XSS) vulnerability in Description metadataformwork project · formwork · CWE-79 RCE XSS	Medium4.8	—	0.5%	Jun 7, 2024

CVE-2026-27198
35Monitor
Formwork Improperly Manages Privileges During User Creation
HighCVSS 8.8No exploitEPSS 1%
formwork project · formworkFeb 21, 2026
CVE-2025-65956
21Monitor
Formwork CMS Has a Stored Cross-Site Scripting (XSS) Vulnerability in Blog Tags
MediumCVSS 5.4No exploitEPSS 0%
- XSS
formwork project · formworkNov 25, 2025
CVE-2023-24230
19Monitor
A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute
MediumCVSS 4.8No exploitEPSS 1%
- RCE
- XSS
formwork project · formworkFeb 10, 2023
CVE-2024-37160
19Monitor
Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata
MediumCVSS 4.8No exploitEPSS 0%
- RCE
- XSS
formwork project · formworkJun 7, 2024