https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:28:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-323041 EUVD-2026-323041 https://cve.radiocsirt.org/vuln/euvd-2026-323041 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47266 <p>Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users could modify existing submissions by posting a known or guessed submission ID to formie/submissions/save-submission. This vulnerability is fixed in 2.2.21 and 3.1.26.</p> <p>Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users could modify existing submissions by posting a known or guessed submission ID to formie/submissions/save-submission. This vulnerability is fixed in 2.2.21 and 3.1.26.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47266 https://cve.radiocsirt.org/vuln/ghsa-pgxq-p76c-x9cg <p><strong>Affected:</strong> Packagist: verbb/formie</p> <p>### Impact Unauthenticated users could modify existing submissions by posting a known or guessed submission ID to `formie/submissions/save-submission`.</p> <p>### Patches [2.2.21](https://github.com/verbb/formie/releases/tag/2.2.21), [3.1.26](https://github.com/verbb/formie/releases/tag/3.1.26)</p> <p>### Workarounds Block unauthenticated access to `actions/formie/submissions/save-submission`, or disable/customize front-end submission editing until patched.</p> <p>### Credit formie extends many thanks to: - Florian (Cyber Security Engineer, arcade solutions ag) - Contact: [security@arcade.ch](mailto:security@arcade.ch)</p> <p><strong>Affected:</strong> Packagist: verbb/formie</p> <p>### Impact Unauthenticated users could modify existing submissions by posting a known or guessed submission ID to `formie/submissions/save-submission`.</p> <p>### Patches [2.2.21](https://github.com/verbb/formie/releases/tag/2.2.21), [3.1.26](https://github.com/verbb/formie/releases/tag/3.1.26)</p> <p>### Workarounds Block unauthenticated access to `actions/formie/submissions/save-submission`, or disable/customize front-end submission editing until patched.</p> <p>### Credit formie extends many thanks to: - Florian (Cyber Security Engineer, arcade solutions ag) - Contact: [security@arcade.ch](mailto:security@arcade.ch)</p> https://cve.radiocsirt.org/vuln/ghsa-pgxq-p76c-x9cg