Craft CMS code injection vulnerability

Versions of Craft CMS from 5.8.0 to 5.11.0 have a code injection vulnerability. This vulnerability stems from improper handling of JSON string fields passed into the ContentBlock::setFieldLayout method. It allows authenticated administrators to inject Yii behaviors. Attackers who have enabled...