Security Advisory

CVE-2025-52122

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-27 00:00:00

Last updated 2025-08-27 14:40:07

Assigner mitre

State PUBLISHED

Description

Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission title).

← Browse all CVEs View on cve.org ↗