Back to search
CVE-2024-58303
Published: Dec 11, 2025
Modified: Apr 7, 2026
PUBLISHED
Description
FoF Pretty Mail 1.1.2 contains a server-side template injection vulnerability that allows administrative users to inject malicious code into email templates. Attackers can execute system commands by inserting crafted template expressions that trigger arbitrary code execution during email generation.
| Vendor | Product | Versions |
|---|---|---|
Flarum | FriendsofFlarum Pretty Mail | affected 1.1.2 |
Weaknesses (CWE)
References
ExploitDB-51948
exploit
Flarum Homepage
product
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now