Lucene search
+L

2 matches found

OSV
OSV
added 2024/05/20 8:26 p.m.105 views

GHSA-V45M-HXQP-FWF5 verbb/formie Server-Side Template Injection for variable-enabled settings

Impact Users with access to a form's settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or rendering the text. This is listed as low-medium severity due to...

4.4CVSS4.6AI score0.00255EPSS
SaveExploits0References4
Rows per page
Query Builder