Known Vulnerabilities for Forms by Umbraco
Listed below are 1 of the newest known vulnerabilities associated with "Forms" by "Umbraco".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61955 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hannan گرویتی ف�... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-57668 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-for... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-57421 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks For... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-57378 json | Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms allows Exploiting Incorrectly Configured Acce... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-57312 json | Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-56814 json | Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce i... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-56785 json | FlatPress contains a stored cross-site scripting vulnerability in comment and contact forms where name, URL, and email fields... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-56291 json | The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable... | Not Provided | 2026-07-09 | 2026-07-11 |
| CVE-2026-56069 json | Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-55664 json | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table and c... | Not Provided | 2026-07-10 | 2026-07-13 |