Product by Umbraco
Umbraco.Forms.Issues
7 known vulnerabilities in Umbraco.Forms.Issues (Umbraco), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-68924 | Umbraco Forms: Inclusion of Functionality from Untrusted Control Sphere | 7.5 | |
| Critical | CVE-2021-33224 | Umbraco.Forms.Issues: Code Execution | 9.8 | |
| Medium | CVE-2026-24687 | Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac | 6.5 | |
| High | CVE-2020-7685 | Insecure Defaults | 5.4 | |
| Medium | CVE-2025-23041 | Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms | 5.8 | |
| Medium | CVE-2025-47280 | Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow | 6.1 | |
| Medium | CVE-2024-35239 | Stored Cross-site Scripting on Components of Umbraco Forms | 2.7 |