Vulnerabilities in formbricks

3 results

CVE-2025-59934CRITICALFormbricks missing JWT signature verificationEPSS 9.1%CVE-2026-110620MEDIUMFormbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationIdEPSS 0.6%CVE-2026-105090MEDIUMFormbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented MaEPSS 0.3%