Skip to content
OpenAdvisories

Vendor

solspace

2 known vulnerabilities.

Products

craft-freeform 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-73858 Public exploit

    Solspace Freeform: Limited Twig template injection via submitted field values

    Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can be evaluated by the isolated Twig renderer when rendered into HTML attributes. An unauthenticated at…

    solspace craft-freeform solspace/craft-freeform Packagist