What’s Vulnerable › Products

solspace craft-freeform vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your solspace craft-freeform version is affected

Latest solspace craft-freeform vulnerabilities

• CVE-2026-73858 — Solspace Freeform: Limited Twig template injection via submitted field values (CVSS 5.3)
• CVE-2026-26188 — Solspace Freeform plugin affected by Stored Cross-Site Scripting (XSS) in Freeform Craft Plugin CP UI (builder/integrations) (CVSS 5.4)
• CVE-2025-52122 — (CVSS 9.8)