Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

solspace/craft-freeform

3 known vulnerabilities (1 critical, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 2 medium
Registry
Packagist

Advisories 3

  • CVE-2026-73858Medium 5.3

    Solspace Freeform: Limited Twig template injection via submitted field values

    Affected: from 5.0.0, fixed in 5.10.14.

  • CVE-2026-26188Medium 5.1

    Solspace Freeform plugin affected by Stored Cross-Site Scripting (XSS) in Freeform Craft Plugin CP UI (builder/integrations)

    Affected: from 5.0.0, fixed in 5.14.7.

  • CVE-2025-52122Critical 9.8

    Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in…

    Affected: from 5.0.0, fixed in 5.10.16.