Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/02/12 10:55 p.m.35 views

CVE-2026-26188 Solspace Freeform plugin affected by Stored Cross-Site Scripting (XSS) in Freeform Craft Plugin CP UI (builder/integrations)

Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user able to create/edit forms can inject arbitrary HTML/JS into the Craft Control Panel CP builder and integrations views. User-controlled form labels and integration metadata are...

5.1CVSS0.00253EPSS
SaveExploits1References3
Rows per page
Query Builder