1 matches found
CVE-2022-21648 Sandbox bypass in Latte templates
Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affected versions it has been found that a sandbox escape exists allowing for injection into web pages generated from Latte. This may lead to XSS attacks. The issue is fixed in the...
8.2CVSS8.1AI score0.00817EPSS
SaveExploits0References2
20