Login Request a demo
UM
Product
Umbraco.Forms.Issues
by umbraco · last CVE Jan 29, 2026
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities4Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Umbraco.Forms.Issues to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24687
6.5
0%
Jan 29
Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac
Affected: >= 16.0.0, < 16.4.1; >= 17.0.0, < 17.1.1
CVE-2025-47280
6.1
0%
May 13
Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow
Affected: >= 7.0.0, < 13.4.2; >= 15.0.0, < 15.1.2
CVE-2024-35239
5.4
0%
May 28
Stored Cross-site Scripting on Components of Umbraco Forms
Affected: >= 13.0.0, < 13.0.1; >= 12.0.0, < 12.2.2; >= 10.0.0, < 10.5.3; < 8.13.13
CVE-2025-23041
5.3
0%
Jan 14
Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms
Affected: < 8.13.16; >= 10.0.0, < 10.5.7; >= 11.0.0, < 13.2.2; >= 14.0.0, < 14.1.2
Showing 4