Skip to content
OpenAdvisories

Package · Packagist

solspace/craft-freeform

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-52122 Public exploit

    The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability

    Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission title).

    solspace/craft-freeform Packagist