CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-26188

Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user (able to create/edit forms) can inject arbitrary HTML/JS into the Craft Control Panel (CP) builder and integrations views. User-controlled form labels and integration metadata are rendered with dangerouslySetInnerHTML without sanitization, leading to stored XSS that executes when any admin views the builder/integration screens. This vulnerability is fixed in 5.14.7.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 15.4%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2026-26188

Solspace » Freeform » Version: 5.0.0

cpe:2.3:a:solspace:freeform:5.0.0
Solspace » Freeform » Version: 5.0.1

cpe:2.3:a:solspace:freeform:5.0.1
Solspace » Freeform » Version: 5.0.10

cpe:2.3:a:solspace:freeform:5.0.10
Solspace » Freeform » Version: 5.0.11

cpe:2.3:a:solspace:freeform:5.0.11
Solspace » Freeform » Version: 5.0.12

cpe:2.3:a:solspace:freeform:5.0.12
Solspace » Freeform » Version: 5.0.13

cpe:2.3:a:solspace:freeform:5.0.13
Solspace » Freeform » Version: 5.0.14

cpe:2.3:a:solspace:freeform:5.0.14
Solspace » Freeform » Version: 5.0.14.1

cpe:2.3:a:solspace:freeform:5.0.14.1
Solspace » Freeform » Version: 5.0.15

cpe:2.3:a:solspace:freeform:5.0.15
Solspace » Freeform » Version: 5.0.16

cpe:2.3:a:solspace:freeform:5.0.16
Solspace » Freeform » Version: 5.0.2

cpe:2.3:a:solspace:freeform:5.0.2
Solspace » Freeform » Version: 5.0.3

cpe:2.3:a:solspace:freeform:5.0.3
Solspace » Freeform » Version: 5.0.4

cpe:2.3:a:solspace:freeform:5.0.4
Solspace » Freeform » Version: 5.0.5

cpe:2.3:a:solspace:freeform:5.0.5
Solspace » Freeform » Version: 5.0.6

cpe:2.3:a:solspace:freeform:5.0.6
Solspace » Freeform » Version: 5.0.6.1

cpe:2.3:a:solspace:freeform:5.0.6.1
Solspace » Freeform » Version: 5.0.7

cpe:2.3:a:solspace:freeform:5.0.7
Solspace » Freeform » Version: 5.0.8

cpe:2.3:a:solspace:freeform:5.0.8
Solspace » Freeform » Version: 5.0.9

cpe:2.3:a:solspace:freeform:5.0.9
Solspace » Freeform » Version: 5.1.0

cpe:2.3:a:solspace:freeform:5.1.0
Solspace » Freeform » Version: 5.1.1

cpe:2.3:a:solspace:freeform:5.1.1
Solspace » Freeform » Version: 5.1.10

cpe:2.3:a:solspace:freeform:5.1.10
Solspace » Freeform » Version: 5.1.11

cpe:2.3:a:solspace:freeform:5.1.11
Solspace » Freeform » Version: 5.1.12

cpe:2.3:a:solspace:freeform:5.1.12
Solspace » Freeform » Version: 5.1.13

cpe:2.3:a:solspace:freeform:5.1.13
Solspace » Freeform » Version: 5.1.13.1

cpe:2.3:a:solspace:freeform:5.1.13.1
Solspace » Freeform » Version: 5.1.14

cpe:2.3:a:solspace:freeform:5.1.14
Solspace » Freeform » Version: 5.1.15

cpe:2.3:a:solspace:freeform:5.1.15
Solspace » Freeform » Version: 5.1.16

cpe:2.3:a:solspace:freeform:5.1.16
Solspace » Freeform » Version: 5.1.16.1

cpe:2.3:a:solspace:freeform:5.1.16.1
Solspace » Freeform » Version: 5.1.17

cpe:2.3:a:solspace:freeform:5.1.17
Solspace » Freeform » Version: 5.1.18

cpe:2.3:a:solspace:freeform:5.1.18
Solspace » Freeform » Version: 5.1.18.1

cpe:2.3:a:solspace:freeform:5.1.18.1
Solspace » Freeform » Version: 5.1.19

cpe:2.3:a:solspace:freeform:5.1.19
Solspace » Freeform » Version: 5.1.19.1

cpe:2.3:a:solspace:freeform:5.1.19.1
Solspace » Freeform » Version: 5.1.2

cpe:2.3:a:solspace:freeform:5.1.2
Solspace » Freeform » Version: 5.1.3

cpe:2.3:a:solspace:freeform:5.1.3
Solspace » Freeform » Version: 5.1.4

cpe:2.3:a:solspace:freeform:5.1.4
Solspace » Freeform » Version: 5.1.5

cpe:2.3:a:solspace:freeform:5.1.5
Solspace » Freeform » Version: 5.1.5.1

cpe:2.3:a:solspace:freeform:5.1.5.1
Solspace » Freeform » Version: 5.1.6

cpe:2.3:a:solspace:freeform:5.1.6
Solspace » Freeform » Version: 5.1.7

cpe:2.3:a:solspace:freeform:5.1.7
Solspace » Freeform » Version: 5.1.8

cpe:2.3:a:solspace:freeform:5.1.8
Solspace » Freeform » Version: 5.1.9

cpe:2.3:a:solspace:freeform:5.1.9
Solspace » Freeform » Version: 5.10.0

cpe:2.3:a:solspace:freeform:5.10.0
Solspace » Freeform » Version: 5.10.1

cpe:2.3:a:solspace:freeform:5.10.1
Solspace » Freeform » Version: 5.10.10

cpe:2.3:a:solspace:freeform:5.10.10
Solspace » Freeform » Version: 5.10.11

cpe:2.3:a:solspace:freeform:5.10.11
Solspace » Freeform » Version: 5.10.12

cpe:2.3:a:solspace:freeform:5.10.12
Solspace » Freeform » Version: 5.10.13

cpe:2.3:a:solspace:freeform:5.10.13
Solspace » Freeform » Version: 5.10.14

cpe:2.3:a:solspace:freeform:5.10.14
Solspace » Freeform » Version: 5.10.15

cpe:2.3:a:solspace:freeform:5.10.15
Solspace » Freeform » Version: 5.10.15.1

cpe:2.3:a:solspace:freeform:5.10.15.1
Solspace » Freeform » Version: 5.10.16

cpe:2.3:a:solspace:freeform:5.10.16
Solspace » Freeform » Version: 5.10.16.1

cpe:2.3:a:solspace:freeform:5.10.16.1
Solspace » Freeform » Version: 5.10.17

cpe:2.3:a:solspace:freeform:5.10.17
Solspace » Freeform » Version: 5.10.17.1

cpe:2.3:a:solspace:freeform:5.10.17.1
Solspace » Freeform » Version: 5.10.2

cpe:2.3:a:solspace:freeform:5.10.2
Solspace » Freeform » Version: 5.10.3

cpe:2.3:a:solspace:freeform:5.10.3
Solspace » Freeform » Version: 5.10.4

cpe:2.3:a:solspace:freeform:5.10.4
Solspace » Freeform » Version: 5.10.5

cpe:2.3:a:solspace:freeform:5.10.5
Solspace » Freeform » Version: 5.10.6

cpe:2.3:a:solspace:freeform:5.10.6
Solspace » Freeform » Version: 5.10.7

cpe:2.3:a:solspace:freeform:5.10.7
Solspace » Freeform » Version: 5.10.8

cpe:2.3:a:solspace:freeform:5.10.8
Solspace » Freeform » Version: 5.10.9

cpe:2.3:a:solspace:freeform:5.10.9
Solspace » Freeform » Version: 5.11.0

cpe:2.3:a:solspace:freeform:5.11.0
Solspace » Freeform » Version: 5.11.1

cpe:2.3:a:solspace:freeform:5.11.1
Solspace » Freeform » Version: 5.11.10

cpe:2.3:a:solspace:freeform:5.11.10
Solspace » Freeform » Version: 5.11.11

cpe:2.3:a:solspace:freeform:5.11.11
Solspace » Freeform » Version: 5.11.12

cpe:2.3:a:solspace:freeform:5.11.12
Solspace » Freeform » Version: 5.11.13

cpe:2.3:a:solspace:freeform:5.11.13
Solspace » Freeform » Version: 5.11.14

cpe:2.3:a:solspace:freeform:5.11.14
Solspace » Freeform » Version: 5.11.15

cpe:2.3:a:solspace:freeform:5.11.15
Solspace » Freeform » Version: 5.11.16

cpe:2.3:a:solspace:freeform:5.11.16
Solspace » Freeform » Version: 5.11.17

cpe:2.3:a:solspace:freeform:5.11.17
Solspace » Freeform » Version: 5.11.2

cpe:2.3:a:solspace:freeform:5.11.2
Solspace » Freeform » Version: 5.11.3

cpe:2.3:a:solspace:freeform:5.11.3
Solspace » Freeform » Version: 5.11.4

cpe:2.3:a:solspace:freeform:5.11.4
Solspace » Freeform » Version: 5.11.5

cpe:2.3:a:solspace:freeform:5.11.5
Solspace » Freeform » Version: 5.11.6

cpe:2.3:a:solspace:freeform:5.11.6
Solspace » Freeform » Version: 5.11.7

cpe:2.3:a:solspace:freeform:5.11.7
Solspace » Freeform » Version: 5.11.8

cpe:2.3:a:solspace:freeform:5.11.8
Solspace » Freeform » Version: 5.11.9

cpe:2.3:a:solspace:freeform:5.11.9
Solspace » Freeform » Version: 5.12.0

cpe:2.3:a:solspace:freeform:5.12.0
Solspace » Freeform » Version: 5.12.1

cpe:2.3:a:solspace:freeform:5.12.1
Solspace » Freeform » Version: 5.12.2

cpe:2.3:a:solspace:freeform:5.12.2
Solspace » Freeform » Version: 5.12.3

cpe:2.3:a:solspace:freeform:5.12.3
Solspace » Freeform » Version: 5.12.4

cpe:2.3:a:solspace:freeform:5.12.4
Solspace » Freeform » Version: 5.13.0

cpe:2.3:a:solspace:freeform:5.13.0
Solspace » Freeform » Version: 5.13.1

cpe:2.3:a:solspace:freeform:5.13.1
Solspace » Freeform » Version: 5.13.2

cpe:2.3:a:solspace:freeform:5.13.2
Solspace » Freeform » Version: 5.13.3

cpe:2.3:a:solspace:freeform:5.13.3
Solspace » Freeform » Version: 5.13.4

cpe:2.3:a:solspace:freeform:5.13.4
Solspace » Freeform » Version: 5.13.5

cpe:2.3:a:solspace:freeform:5.13.5
Solspace » Freeform » Version: 5.13.6

cpe:2.3:a:solspace:freeform:5.13.6
Solspace » Freeform » Version: 5.13.7

cpe:2.3:a:solspace:freeform:5.13.7
Solspace » Freeform » Version: 5.13.8

cpe:2.3:a:solspace:freeform:5.13.8
Solspace » Freeform » Version: 5.14.0

cpe:2.3:a:solspace:freeform:5.14.0
Solspace » Freeform » Version: 5.14.1

cpe:2.3:a:solspace:freeform:5.14.1
Solspace » Freeform » Version: 5.14.2

cpe:2.3:a:solspace:freeform:5.14.2
Solspace » Freeform » Version: 5.14.3

cpe:2.3:a:solspace:freeform:5.14.3
Solspace » Freeform » Version: 5.14.4

cpe:2.3:a:solspace:freeform:5.14.4
Solspace » Freeform » Version: 5.14.5

cpe:2.3:a:solspace:freeform:5.14.5
Solspace » Freeform » Version: 5.14.6

cpe:2.3:a:solspace:freeform:5.14.6
Solspace » Freeform » Version: 5.2.0

cpe:2.3:a:solspace:freeform:5.2.0
Solspace » Freeform » Version: 5.2.1

cpe:2.3:a:solspace:freeform:5.2.1
Solspace » Freeform » Version: 5.2.2

cpe:2.3:a:solspace:freeform:5.2.2
Solspace » Freeform » Version: 5.3.0

cpe:2.3:a:solspace:freeform:5.3.0
Solspace » Freeform » Version: 5.3.1

cpe:2.3:a:solspace:freeform:5.3.1
Solspace » Freeform » Version: 5.3.2

cpe:2.3:a:solspace:freeform:5.3.2
Solspace » Freeform » Version: 5.3.3

cpe:2.3:a:solspace:freeform:5.3.3
Solspace » Freeform » Version: 5.3.3.1

cpe:2.3:a:solspace:freeform:5.3.3.1
Solspace » Freeform » Version: 5.3.4

cpe:2.3:a:solspace:freeform:5.3.4
Solspace » Freeform » Version: 5.3.5

cpe:2.3:a:solspace:freeform:5.3.5
Solspace » Freeform » Version: 5.4.0

cpe:2.3:a:solspace:freeform:5.4.0
Solspace » Freeform » Version: 5.4.1

cpe:2.3:a:solspace:freeform:5.4.1
Solspace » Freeform » Version: 5.4.2

cpe:2.3:a:solspace:freeform:5.4.2
Solspace » Freeform » Version: 5.5.0

cpe:2.3:a:solspace:freeform:5.5.0
Solspace » Freeform » Version: 5.5.1

cpe:2.3:a:solspace:freeform:5.5.1
Solspace » Freeform » Version: 5.5.10

cpe:2.3:a:solspace:freeform:5.5.10
Solspace » Freeform » Version: 5.5.2

cpe:2.3:a:solspace:freeform:5.5.2
Solspace » Freeform » Version: 5.5.3

cpe:2.3:a:solspace:freeform:5.5.3
Solspace » Freeform » Version: 5.5.4

cpe:2.3:a:solspace:freeform:5.5.4
Solspace » Freeform » Version: 5.5.5

cpe:2.3:a:solspace:freeform:5.5.5
Solspace » Freeform » Version: 5.5.6

cpe:2.3:a:solspace:freeform:5.5.6
Solspace » Freeform » Version: 5.5.7

cpe:2.3:a:solspace:freeform:5.5.7
Solspace » Freeform » Version: 5.5.8

cpe:2.3:a:solspace:freeform:5.5.8
Solspace » Freeform » Version: 5.5.9

cpe:2.3:a:solspace:freeform:5.5.9
Solspace » Freeform » Version: 5.6.0

cpe:2.3:a:solspace:freeform:5.6.0
Solspace » Freeform » Version: 5.6.1

cpe:2.3:a:solspace:freeform:5.6.1
Solspace » Freeform » Version: 5.6.2

cpe:2.3:a:solspace:freeform:5.6.2
Solspace » Freeform » Version: 5.6.3

cpe:2.3:a:solspace:freeform:5.6.3
Solspace » Freeform » Version: 5.6.4

cpe:2.3:a:solspace:freeform:5.6.4
Solspace » Freeform » Version: 5.6.5

cpe:2.3:a:solspace:freeform:5.6.5
Solspace » Freeform » Version: 5.6.6

cpe:2.3:a:solspace:freeform:5.6.6
Solspace » Freeform » Version: 5.6.7

cpe:2.3:a:solspace:freeform:5.6.7
Solspace » Freeform » Version: 5.6.8

cpe:2.3:a:solspace:freeform:5.6.8
Solspace » Freeform » Version: 5.7.0

cpe:2.3:a:solspace:freeform:5.7.0
Solspace » Freeform » Version: 5.7.0.1

cpe:2.3:a:solspace:freeform:5.7.0.1
Solspace » Freeform » Version: 5.7.1

cpe:2.3:a:solspace:freeform:5.7.1
Solspace » Freeform » Version: 5.7.2

cpe:2.3:a:solspace:freeform:5.7.2
Solspace » Freeform » Version: 5.7.3

cpe:2.3:a:solspace:freeform:5.7.3
Solspace » Freeform » Version: 5.7.4

cpe:2.3:a:solspace:freeform:5.7.4
Solspace » Freeform » Version: 5.8.0

cpe:2.3:a:solspace:freeform:5.8.0
Solspace » Freeform » Version: 5.8.1

cpe:2.3:a:solspace:freeform:5.8.1
Solspace » Freeform » Version: 5.8.2

cpe:2.3:a:solspace:freeform:5.8.2
Solspace » Freeform » Version: 5.8.3

cpe:2.3:a:solspace:freeform:5.8.3
Solspace » Freeform » Version: 5.8.4

cpe:2.3:a:solspace:freeform:5.8.4
Solspace » Freeform » Version: 5.8.5

cpe:2.3:a:solspace:freeform:5.8.5
Solspace » Freeform » Version: 5.8.6

cpe:2.3:a:solspace:freeform:5.8.6
Solspace » Freeform » Version: 5.9.0

cpe:2.3:a:solspace:freeform:5.9.0
Solspace » Freeform » Version: 5.9.1

cpe:2.3:a:solspace:freeform:5.9.1
Solspace » Freeform » Version: 5.9.1.1

cpe:2.3:a:solspace:freeform:5.9.1.1
Solspace » Freeform » Version: 5.9.1.2

cpe:2.3:a:solspace:freeform:5.9.1.2
Solspace » Freeform » Version: 5.9.10

cpe:2.3:a:solspace:freeform:5.9.10
Solspace » Freeform » Version: 5.9.11

cpe:2.3:a:solspace:freeform:5.9.11
Solspace » Freeform » Version: 5.9.12

cpe:2.3:a:solspace:freeform:5.9.12
Solspace » Freeform » Version: 5.9.13

cpe:2.3:a:solspace:freeform:5.9.13
Solspace » Freeform » Version: 5.9.14

cpe:2.3:a:solspace:freeform:5.9.14
Solspace » Freeform » Version: 5.9.15

cpe:2.3:a:solspace:freeform:5.9.15
Solspace » Freeform » Version: 5.9.16

cpe:2.3:a:solspace:freeform:5.9.16
Solspace » Freeform » Version: 5.9.16.1

cpe:2.3:a:solspace:freeform:5.9.16.1
Solspace » Freeform » Version: 5.9.2

cpe:2.3:a:solspace:freeform:5.9.2
Solspace » Freeform » Version: 5.9.3

cpe:2.3:a:solspace:freeform:5.9.3
Solspace » Freeform » Version: 5.9.4

cpe:2.3:a:solspace:freeform:5.9.4
Solspace » Freeform » Version: 5.9.5

cpe:2.3:a:solspace:freeform:5.9.5
Solspace » Freeform » Version: 5.9.6

cpe:2.3:a:solspace:freeform:5.9.6
Solspace » Freeform » Version: 5.9.7

cpe:2.3:a:solspace:freeform:5.9.7
Solspace » Freeform » Version: 5.9.8

cpe:2.3:a:solspace:freeform:5.9.8
Solspace » Freeform » Version: 5.9.9

cpe:2.3:a:solspace:freeform:5.9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-26188

Products

Pricing

Contact Us