Vulnerability Database

With exploit

formwork_project / formwork

Title Severity Exploit Date Affected Version
CVE-2025-65956 Medium Nov 26, 2025 < 2.2.0
CVE-2024-37160 Low Jun 7, 2024 < 1.13.1
CVE-2023-24230 Low Feb 10, 2023 == 1.12.1

Composer icon getformwork / formwork

Title Severity Exploit Date Affected Version
Formwork improperly validates input of User role preventing site and panel availability High Mar 1, 2025 >= 2.0.0-beta.1 < 2.0.0-beta.4
Formwork has a cross-site scripting (XSS) vulnerability in Site title Medium Mar 1, 2025 == 2.0.0-beta.3
>= 2.0.0-beta.3 < 2.0.0-beta.4
CVE-2024-37160 Low Jun 7, 2024 < 1.13.1
== 2.0.0-beta.1
CVE-2024-35621 Low May 28, 2024 < 1.13.0