CVE-2026-26188
1 advisory.
Packagist/solspace/craft-freeform CVE-2026-26188: low, EPSS 0.36%
Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue
Action: Upgrade solspace/craft-freeform to 5.14.7 or later.
composer require solspace/craft-freeform:5.14.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.14.7 | - |
Fixed versions
| 5.14.7 |
Sources
- osv: GHSA-jp3q-wwp3-pwv9
- https://github.com/solspace/craft-freeform/security/advisories/GHSA-jp3q-wwp3-pwv9
- https://nvd.nist.gov/vuln/detail/CVE-2026-26188
- https://github.com/solspace/craft-freeform/commit/b9adad6cdf1eba5400aae8b1ae39bd7d4d33af5e
- https://github.com/solspace/craft-freeform
- https://github.com/solspace/craft-freeform/releases/tag/v5.14.7
CVE-2026-26188 · published · modified · JSON