Executive brief
Formwork improperly validates input of User role preventing site and panel availability
Affected products
- Packagist getformwork/formwork
Junglewise Threat Intelligence
Formwork improperly validates input of User role preventing site and panel availability
Severity: low · CVSS 3.1 · Published 2025-03-01
Technologies: getformwork/formwork (Packagist). Vendors: Packagist.
Related threats
- Formwork Improperly Managed Privileges in User creation
- Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags
- Formwork has a cross-site scripting (XSS) vulnerability in Site title
- formwork Cross-site scripting vulnerability in Markdown fields
- Formwork Cross-site Scripting (XSS) from Page title field