CVE-2025-52122

CVE CraftCMS Freeform CraftCMS Freeform يحتوي على ثغرة SSTI تؤدي إلى حقن تعليمات برمجية عشوائية لجميع المستخدمين الذين لديهم صلاحية تحرير نموذج عنوان الإرسال. الإصدارات المتأثرة هي v5.0.0 test % set form = freeform.form'pentest' % % if form % form.render % else % Form not found. % endif % سيكون ق...

CVE-2025-52122

Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection SSTI vulnerability, resulting in arbitrary code injection for all users that have access to editing a form submission title...

PT-2025-34870 · Craft Cms · Craft Cms +1

Name of the Vulnerable Software and Affected Versions: Freeform versions 5.0.0 through 5.10.16 Description: The Freeform plugin for CraftCMS contains a Server-side template injection SSTI vulnerability. This allows for arbitrary code injection for users with permission to edit a form submission...