Skip to content
OpenAdvisories

Package · Packagist

fof/pretty-mail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2024-58303

    FoF Pretty Mail 1.1.2 Server Side Template Injection via Email Template Settings

    FoF Pretty Mail 1.1.2 contains a server-side template injection vulnerability that allows administrative users to inject malicious code into email templates. Attackers can execute system commands by inserting crafted template expressions that trigger arbitrar…

    flarum FriendsofFlarum Pretty Mail fof/pretty-mail Packagist