WordPress Responsive Blocks plugin < 2.3.0 - Unauthenticated HTML Injection in Form Notification Email vulnerability

Unauthenticated HTML Injection in Form Notification Email vulnerability discovered by Amin Guliyev in WordPress Plugin Responsive Blocks versions 2.3.0...

CVE-2026-71435

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, the default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the...

PT-2026-68803

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.74.3 Statamic versions prior to 6.24.2 Description The default form notification email renders user-submitted values without proper escaping. This allows an unauthenticated user to inject HTML into the notification...

CVE-2026-71435: Improper Neutralization of Input During Web Page Generation

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, the default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the...