VULNERABILITY INTELLIGENCE

CVE-2026-47266

EPSS probability0.31%
CISA KEVNot currently listed
Published2026-05-29
Last modified2026-07-22

Description

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users could modify existing submissions by posting a known or guessed submission ID to formie/submissions/save-submission. This vulnerability is fixed in 2.2.21 and 3.1.26.

Weakness classification

  • security-advisories@github.com: CWE-639

Primary references