Skip to content
OpenAdvisories

Package · npm

@strapi/plugin-email

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2023-22621 Public exploit Scanner template EPSS 71%

    Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin

    Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the serve…

    @strapi/plugin-users-permissions @strapi/plugin-email npm