silverstripe-advancedworkflow vulnerabilities
1 known vulnerability in silverstripe-advancedworkflow from Silverstripe. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
silverstripe-advancedworkflow: Improper Neutralization of Special Elements Used in a Template Engine
Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in Notif