Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:20:36 +0000 EUVD-2026-5606 https://cve.radiocsirt.org/vuln/euvd-2026-5606 EUVD-2026-5606 https://cve.radiocsirt.org/vuln/euvd-2026-5606 fkie_cve-2024-35191 https://cve.radiocsirt.org/vuln/fkie_cve-2024-35191 <p>Formie is a Craft CMS plugin for creating forms. Prior to 2.1.6, users with access to a form&#39;s settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or rendering the text. This has been fixed in Formie 2.1.6.</p> <p>Formie is a Craft CMS plugin for creating forms. Prior to 2.1.6, users with access to a form&#39;s settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or rendering the text. This has been fixed in Formie 2.1.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-35191 GHSA-v45m-hxqp-fwf5 — verbb/formie Server-Side Template Injection for variable-enabled settings https://cve.radiocsirt.org/vuln/ghsa-v45m-hxqp-fwf5 <p><strong>Affected:</strong> Packagist: verbb/formie</p> <p>### Impact Users with access to a form&#39;s settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or rendering the text.</p> <p>This is listed as low-medium severity due to requiring control panel access to edit a form&#39;s settings.</p> <p>### Patches This has been fixed in Formie 2.1.6. Users should ensure they are running at least this version.</p> <p><strong>Affected:</strong> Packagist: verbb/formie</p> <p>### Impact Users with access to a form&#39;s settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or rendering the text.</p> <p>This is listed as low-medium severity due to requiring control panel access to edit a form&#39;s settings.</p> <p>### Patches This has been fixed in Formie 2.1.6. Users should ensure they are running at least this version.</p> https://cve.radiocsirt.org/vuln/ghsa-v45m-hxqp-fwf5