2 matches found
CVE-2026-71435 Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Template
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, the default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the...
CVE-2026-71435 Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Template
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, the default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the...