CVE-2025-55797: Formcms

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.

Affected products

• Formcms Formcms: version 0.5.4 only

Published 2025-09-30. Last modified 2026-06-17.