Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Barrelstrengthdesign Subscribe
Filtered by product Sprout Forms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-11056 1 Barrelstrengthdesign 1 Sprout Forms 2021-10-26 6.5 MEDIUM 6.3 MEDIUM
In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0.