PT-2021-3232

Name of the Vulnerable Software and Affected Versions Invision Community aka IPS Community Suite versions prior to 4.6.0 Description The issue is related to the IPScmsmodulesfrontpages builder::previewBlock method interacting unsafely with the IPS Theme::runProcessFunction method, allowing for...

CVE-2021-32924: Improper Control of Generation of Code

Invision Community aka IPS Community Suite before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\builder::previewBlock method interacts unsafely with the IPS\Theme::runProcessFunction method...