UM
Product
Umbraco.Forms.Issues
by umbraco · last CVE Jan 29, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add Umbraco.Forms.Issues to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24687
6.5
0%
Jan 29
Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac
Affected: >= 16.0.0, < 16.4.1; >= 17.0.0, < 17.1.1
CVE-2025-47280
6.1
0%
May 13
Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow
Affected: >= 7.0.0, < 13.4.2; >= 15.0.0, < 15.1.2
CVE-2025-23041
5.3
0%
Jan 14
Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms
Affected: < 8.13.16; >= 10.0.0, < 10.5.7; >= 11.0.0, < 13.2.2; >= 14.0.0, < 14.1.2
Showing 3