FormCMS vulnerabilities (NuGet)

2 vulnerabilities.

• FormCMS NuGet FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint CVE-2025-55797 Fix available 6.5 MediumSeptember 30, 2025
• FormCMS NuGet FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability CVE-2025-56236 Fix available 6.1 MediumAugust 28, 2025