Executive brief
Formie has XSS vulnerability for email notification content for preview
Affected products
- Packagist verbb/formie
Junglewise Threat Intelligence
CVE-2025-32426: Formie has XSS vulnerability for email notification content for preview
CVE-2025-32426 · Severity: low · CVSS 3.1 · Published 2025-04-11
Technologies: verbb/formie (Packagist). Vendors: Packagist.
Related threats
- Verbb Formie missing authorization in administrative settings
- Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
- Verbb Formie server-side template injection in Hidden fields
- Formie has XSS vulnerability for importing forms
- verbb/formie Server-Side Template Injection for variable-enabled settings