All 6 CVE vulnerabilities found in formie, with AI-generated Chinese analysis, references, and POCs.
Vendor: verbb
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-52889 | Formie: Server-Side Template Injection in Formie Hidden field defaults CWE-1336 | 9.8 | Critical | 2026-08-19 |
| CVE-2026-47266 | Formie: Unauthenticated front-end submission editing can overwrite existing submissions CWE-639 | - | - | 2026-05-29 |
| CVE-2026-45697 | Formie: Pre-authenticated server-side template injection in Hidden fields CWE-94 | 9.8 | Critical | 2026-05-29 |
| CVE-2025-32426 | Formie has a XSS vulnerability for email notification content for preview CWE-79 | 4.6 | Medium | 2025-04-11 |
| CVE-2025-32427 | Formie has a XSS vulnerability for importing forms CWE-79 | 7.2AI | High AI | 2025-04-11 |
| CVE-2024-35191 | verbb/formie Server-Side Template Injection for variable-enabled settings CWE-1336 | 4.4 | Medium | 2024-05-20 |
All 6 known CVE vulnerabilities affecting formie with full Chinese analysis, references, and POCs where available.