CVE-2025-24775: Made I.t Forms

Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. Forms forms-by-made-it allows Upload a Web Shell to a Web Server.This issue affects Forms: from n/a through <= 2.9.0.

Affected products

• Made I.t Forms: up to and including 2.9.0

Published 2025-08-14. Last modified 2026-06-17.