Executive brief
Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags
Affected products
- Packagist getformwork/formwork
Junglewise Threat Intelligence
CVE-2025-65956: Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags
CVE-2025-65956 · Severity: low · CVSS 3.1 · Published 2025-11-24
Technologies: getformwork/formwork (Packagist). Vendors: Packagist.
Related threats
- Formwork Improperly Managed Privileges in User creation
- Formwork improperly validates input of User role preventing site and panel availability
- Formwork has a cross-site scripting (XSS) vulnerability in Site title
- formwork Cross-site scripting vulnerability in Markdown fields
- Formwork Cross-site Scripting (XSS) from Page title field