Formwork is a flat file-based Content Management System (CMS). An attackers (requires administrator privilege) to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages (except the dashboard). This vulnerability is fixed in 1.13.1.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| getformwork/formwork(Packagist) | 0 | 1.13.1 | N/A |
| getformwork/formwork(Packagist) | 2.0.0-beta.1 | 2.0.0-beta.2 | N/A |
CVSS Metrics
