Formwork
Vendor:
First CVE: Feb 10, 2023 · Active for 3 years
4
Total CVEs
More Total CVEs than 72% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
6.0
Avg CVSS
Higher Avg CVSS than 20% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Formwork over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 10, 2023
3 years ago
Most Recent CVE
Feb 21, 2026
153 days ago
CVE Severity & Scoring
Formwork4 CVEs
75%
25%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network4 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (25.0%)
Unknown0 (0.0%)
Required3 (75.0%)
Privileges Required
Low2 (50.0%)
High2 (50.0%)
None0 (0.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-27198HIGH Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account cr | Feb 21, 2026 | 8.8 | 30 | NO | NO |
CVE-2025-65956MEDIUM Formwork is a flat file-based Content Management System (CMS). Prior to version 2.2.0, inserting unsanitized data into the blog tag field results in stored cross‑site scripting (XS | Nov 26, 2025 | 5.4 | 19 | NO | NO |
CVE-2023-24230MEDIUM A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a cra | Feb 10, 2023 | 4.8 | 18 | NO | NO |
CVE-2024-37160MEDIUM Formwork is a flat file-based Content Management System (CMS). An attackers (requires administrator privilege) to execute arbitrary web scripts by modifying site options via /panel | Jun 7, 2024 | 4.8 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For Formwork
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.12.1 | 1 | 4.8 | 0.5% | 0 | 0 |