Executive brief
Formie has XSS vulnerability for importing forms
Affected products
- Packagist verbb/formie
Junglewise Threat Intelligence
CVE-2025-32427: Formie has XSS vulnerability for importing forms
CVE-2025-32427 · Severity: medium · CVSS 4 · Published 2025-04-11
Technologies: verbb/formie (Packagist). Vendors: Packagist.
Related threats
- Verbb Formie missing authorization in administrative settings
- Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
- Verbb Formie server-side template injection in Hidden fields
- Formie has XSS vulnerability for email notification content for preview
- verbb/formie Server-Side Template Injection for variable-enabled settings