{"action":"Upgrade solspace/craft-freeform to 5.14.7 or later.","affected":[{"fixed":"5.14.7","introduced":"5.0.0"}],"component":"solspace/craft-freeform","cve_ids":["CVE-2026-26188"],"ecosystem":"Packagist","epss":0.00301,"exploited":false,"fixed_versions":["5.14.7"],"ghsa_id":"GHSA-jp3q-wwp3-pwv9","id":"tcs_01M5KF4R6TWB37CC3EEEH0VF8G","modified_at":"2026-02-13T16:46:57.685182Z","published_at":"2026-01-22T21:41:14Z","references":["https://osv.dev/vulnerability/GHSA-jp3q-wwp3-pwv9","https://github.com/solspace/craft-freeform/security/advisories/GHSA-jp3q-wwp3-pwv9","https://nvd.nist.gov/vuln/detail/CVE-2026-26188","https://github.com/solspace/craft-freeform/commit/b9adad6cdf1eba5400aae8b1ae39bd7d4d33af5e","https://github.com/solspace/craft-freeform","https://github.com/solspace/craft-freeform/releases/tag/v5.14.7"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-jp3q-wwp3-pwv9","url":"https://osv.dev/vulnerability/GHSA-jp3q-wwp3-pwv9"}],"summary":"Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue"}