Executive brief
Formwork Improperly Managed Privileges in User creation
Affected products
- Packagist getformwork/formwork
Junglewise Threat Intelligence
CVE-2026-27198: Formwork Improperly Managed Privileges in User creation
CVE-2026-27198 · Severity: low · CVSS 3.1 · Published 2026-02-19
Technologies: getformwork/formwork (Packagist). Vendors: Packagist.
Related threats
- Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags
- Formwork improperly validates input of User role preventing site and panel availability
- Formwork has a cross-site scripting (XSS) vulnerability in Site title
- formwork Cross-site scripting vulnerability in Markdown fields
- Formwork Cross-site Scripting (XSS) from Page title field