https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:47:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349504 EUVD-2026-349504 https://cve.radiocsirt.org/vuln/euvd-2026-349504 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71435 <p>Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and 6.24.2, the default (&#34;automagic&#34;) form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients. This issue is fixed in versions 5.74.3 and 6.24.2.</p> <p>Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and 6.24.2, the default (&#34;automagic&#34;) form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients. This issue is fixed in versions 5.74.3 and 6.24.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71435 https://cve.radiocsirt.org/vuln/ghsa-vx89-p3j7-8xqc <p><strong>Affected:</strong> Packagist: statamic/cms</p> <p>### Impact</p> <p>The default (&#34;automagic&#34;) form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients</p> <p>### Patches</p> <p>This has been fixed in 5.74.3 and 6.24.2.</p> <p><strong>Affected:</strong> Packagist: statamic/cms</p> <p>### Impact</p> <p>The default (&#34;automagic&#34;) form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients</p> <p>### Patches</p> <p>This has been fixed in 5.74.3 and 6.24.2.</p> https://cve.radiocsirt.org/vuln/ghsa-vx89-p3j7-8xqc