FO
Product
Forms
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add Forms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-37334 | 9.8 | Aug 25 | Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion Affected: 4.0.0 before 4.4.9; 6.0.0 before 6.0.10; 7.0.0 before 7.0.7; 7.1.0 before 7.1.4; 7.2.0 before 7.2.1; 7.3.0 before 7.3.2; +10 more |
| CVE-2025-68924 | 7.5 | Jan 16 | In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for remote code execution Affected: through 8.13.16 |
Showing 2