Formwork Cross-site Scripting (XSS) from Page title field

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-24230 · ADVISORY
• getformwork/formwork commit 8781ee1 · WEB
• getformwork/formwork · PACKAGE
• medium.com/@0x2bit/formwork-1-12-1-stored-xss-vulnerability-at-page-title-b6efba27891a · WEB
• getformwork/formwork release 1.12.1 · Product
• medium.com/%400x2bit/formwork-1-12-1-stored-xss-vulnerability-at-page-title-b6efba27891a

getformwork/formwork のその他の脆弱性

• CVE-2026-27198高 8.8Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to properly enforce ro…
• CVE-2025-65956中 5.4Formwork is a flat file-based Content Management System (CMS). Prior to version 2.2.0, inserting unsanitized data into the blog tag field re…
• GHSA-c85w-x26q-ch87高 8.2Formwork improperly validates input of User role preventing site and panel availability
• GHSA-vf6x-59hh-332f中 4.7 Formwork has a cross-site scripting (XSS) vulnerability in Site title
• CVE-2024-37160中 4.8Formwork is a flat file-based Content Management System (CMS). An attackers (requires administrator privilege) to execute arbitrary web scri…