friendsofflarum_pretty_mail vulnerabilities

CVEs whose affected-version data names the friendsofflarum_pretty_mail package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-58303High· 8.6

10mo ago

FoF Pretty Mail 1.1.2 contains a server-side template injection vulnerability that allows administrative users to inject malicious code into email templates

FoF Pretty Mail 1.1.2 contains a server-side template injection vulnerability that allows administrative users to inject malicious code into email templates. Attackers can execute system commands by inserting crafted template expressions…

▾ TwilightFlarum · FriendsofFlarum Pretty MailEPSS 0.54%via NVD