solspace/craft-freeform Security Advisories | GitStock

medium2026-09-23

Solspace Freeform: Limited Twig template injection via submitted field values

GHSA-gxrg-x694-283w · CVE-2026-73858

low2026-01-22

Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue

GHSA-jp3q-wwp3-pwv9 · CVE-2026-26188

low2026-01-15

solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets

GHSA-rwr8-xrpw-9qf5

low2026-01-15

solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data

GHSA-44jg-mv3h-wj6g

low2026-01-15

solspace/craft-freeform Has a DoS Vulnerability

GHSA-58q2-9x27-h2jm

critical2025-08-27

The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability

GHSA-9hp3-f5g8-rccg · CVE-2025-52122