Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page.

Published Dec 19, 2022 · Updated Jul 9, 2026 · Assigned by mitre