Executive brief
formwork Cross-site scripting vulnerability in Markdown fields
Affected products
- Packagist getformwork/formwork
Junglewise Threat Intelligence
CVE-2024-35621: formwork Cross-site scripting vulnerability in Markdown fields
CVE-2024-35621 · Severity: low · CVSS 3.1 · Published 2024-05-28
Technologies: getformwork/formwork (Packagist). Vendors: Packagist.
Related threats
- Formwork Improperly Managed Privileges in User creation
- Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags
- Formwork improperly validates input of User role preventing site and panel availability
- Formwork has a cross-site scripting (XSS) vulnerability in Site title
- Formwork Cross-site Scripting (XSS) from Page title field