Package · Packagist

barrelstrength/sprout-forms

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.4

CVE-2020-11056

Potential Code Injection in Sprout Forms

In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0.

barrelstrength Sprout Forms barrelstrength/sprout-forms barrelstrength/sprout-base-email Packagist

May 7, 2020