CVE-2025-52122 – CraftCMS Freeform SSTI Vulnerability

CVE ID : CVE-2025-52122

Published : Aug. 27, 2025, 3:15 p.m. | 1 hour, 24 minutes ago

Description : Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission title).

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…