barrelstrength/sprout-forms

barrelstrength/sprout-forms

GitHubGitHub
GitHubgithub.com
sprout.barrelstrengthdesign.comsprout.barrelstrengthdesign.com
Releases169
Frequency2 weeks 5 days
Last Release
Stars18
Simple, Beautiful Forms. 100% Control.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-11056↗
7.4 HIGH6.5 MEDIUM

In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0.