Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Formie has a XSS vulnerability for email notification content for preview
Vulnerability Description
Formie is a Craft CMS plugin for creating forms. Prior to version 2.1.44, it is possible to inject malicious code into the HTML content of an email notification, which is then rendered on the preview. There is no issue when rendering the email via normal means (a delivered email). This would require access to the form's email notification settings. This has been fixed in Formie 2.1.44.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Formie for Craft CMS 跨站脚本漏洞
Vulnerability Description
Formie for Craft CMS是Verbb开源的一个Craft CMS的表单插件。 Formie for Craft CMS 2.1.44之前版本存在跨站脚本漏洞，该漏洞源于可能注入恶意代码到HTML内容中。
CVSS Information
N/A
Vulnerability Type
N/A