getformwork Formwork

2 known vulnerabilities in getformwork Formwork, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-104478 CVSS 7.1 high Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete…
  • CVE-2026-82451 CVSS 5.3 medium Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host…