Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/01/22 9:41 p.m.•21 views

Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue

Summary An authenticated, low-privilege user able to create/edit forms can inject arbitrary HTML/JS into the Craft Control Panel CP builder and integrations views. User-controlled form labels and integration metadata are rendered with dangerouslySetInnerHTML without sanitization, leading to store...

5.4CVSS6.1AI score0.00324EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder