Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/01/22 9:41 p.m.15 views

Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue

Summary An authenticated, low-privilege user able to create/edit forms can inject arbitrary HTML/JS into the Craft Control Panel CP builder and integrations views. User-controlled form labels and integration metadata are rendered with dangerouslySetInnerHTML without sanitization, leading to store...

5.4CVSS5.9AI score0.00253EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder