https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:48:50.826721+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-37160 CVE-2024-37160 — Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata 2026-10-06T16:48:50.843376+00:00

Affected: getformwork formwork

Formwork is a flat file-based Content Management System (CMS). An attackers (requires administrator privilege) to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages (except the dashboard). This vulnerability is fixed in 1.13.1.