110 matches found
silverstripe/userforms vulnerable to remote code execution via userforms email subject
Impact The userform email subject field in the CMS is vulnerable to a specially crafted payload being used to run arbitrary code on the server. Reported by Jack Wallace from Bastion Security...
GHSA-G8WR-R2V2-VQC6 silverstripe/userforms vulnerable to remote code execution via userforms email subject
Impact The userform email subject field in the CMS is vulnerable to a specially crafted payload being used to run arbitrary code on the server. Reported by Jack Wallace from Bastion Security...
CVE-2026-54721
Silverstripe UserForms (a visual form builder module for Silverstripe CMS) contains a remote code execution vulnerability in the email recipient subject field. Between versions 6.0.0 and the fixed releases, a specially crafted payload in the subject field is interpreted as executable server-side ...
CVE-2026-54390
CVE-2026-54390 — Exploração em Massa de SSTI Smarty no JTL Shop Formulário de Contato Pré-Autenticação → Assunto do Email → fetch'string:' → RCE Visão Geral CVE-2026-54390 é uma vulnerabilidade crítica CVSS 9.8 de Injeção de Template do Lado do Servidor sem autenticação no JTL Shop 5.2.0–5.7.1. O...
CVE-2025-43920
CVE-2025-43920: Iniezione di comandi tramite oggetto dell'email in GNU Mailman 2.1.39 pacchetto cPanel/WHM Scoperto da: Firudin Davudzada & Musazada Aydan Data di divulgazione: Aprile 2025 CVE ID: CVE-2025-43920 Gravità: 5.4 Media CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Tipo di attacco: Remo...
CVE-2026-77129
The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...
CVE-2026-77129
CVE-2026-77129 is a Server-Side Template Injection (SSTI) in the TYPO3 extension Event management and registration (sf_event_mgt). The extension passes an editor-configurable email subject string directly into a Fluid template source without sanitization. A backend user with edit access to the ev...
EUVD-2026-65346
The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...
CVE-2026-77129 Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)
The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...
CVE-2026-48849-Roundcube-Webmail-Stored-XSS
CVE-2026-48849 - XSS persistente, HTML Injection e CSS Injection in Roundcube Webmail Panoramica Questo repository contiene un Proof-of-Concept PoC per CVE-2026-48849 , una vulnerabilità di XSS persistente, HTML Injection e CSS Injection in Roundcube Webmail. La vulnerabilità permette che HTML, C...
CVE-2026-38446
A stored cross-site scripting XSS vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread entry title field. User-controlled input in the title is stored without adequate HTML escaping and later rendered in multiple staff-facing templates without proper output encoding...
CVE-2026-12472
The CVE-2026-12472 entry concerns the Kirki – Freeform Page Builder, Website Builder & Customizer WordPress plugin. It states an authorization bypass in all versions up to 6.0.11, enabling unauthenticated attackers to send arbitrary HTML-injected emails via the site’s mail server, potentially phi...
CVE-2026-54721 - Remote code execution via userforms email subject
More info at https://www.silverstripe.org/download/security-releases/cve-2026-54721...
WordPress plugin SMTP2GO for WordPress – Email Made Easy 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...
CVE-2026-44742
A flaw was found in Postorius. This vulnerability allows an attacker to embed malicious code within the subject of an email message. When an administrator or user views the 'Held messages pop-up', this malicious code is executed in their web browser. This can lead to Cross-Site Scripting XSS,...
Pretix Unsafely Evaluates Variables In Emails
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when "name" is used in an email template, it will be replaced with the buyer's name for the final email. This mechanism contained two security-relevant bugs: - It was possible to exfiltrate...
CVE-2025-66514 Nextcloud Mail stored HTML injection in subject text
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injection in the Mail app's message list allowed an authenticated user to inject HTML into the email subjects. Javascript was correctly blocked by the content security policy of the...
EUVD-2006-0670
Malware in sbrugna...