Packagist/getformwork/formwork CVE-2025-65956: medium 6.5, EPSS 0.20%
Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags
Action: Upgrade getformwork/formwork to 2.2.0 or later.
composer require getformwork/formwork:2.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0 | - |
Fixed versions
| 2.2.0 |
Sources
- osv: GHSA-7j46-f57w-76pj
- https://github.com/getformwork/formwork/security/advisories/GHSA-7j46-f57w-76pj
- https://nvd.nist.gov/vuln/detail/CVE-2025-65956
- https://github.com/getformwork/formwork/pull/791
- https://github.com/getformwork/formwork/commit/4abcd60ae7692b46d316f956b0b20fb85336f3b2
- https://github.com/getformwork/formwork
CVE-2025-65956 · published · modified · JSON