Skip to content
OpenAdvisories

Package · Packagist

solspace/craft-freeform

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-73858 Public exploit

    Solspace Freeform: Limited Twig template injection via submitted field values

    Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can be evaluated by the isolated Twig renderer when rendered into HTML attributes. An unauthenticated at…

    solspace craft-freeform solspace/craft-freeform Packagist
  • Critical 9.8
    CVE-2025-52122 Public exploit

    The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability

    Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission title).

    solspace/craft-freeform Packagist