deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-5j8p-438x-rgg5
Package: onelogin/php-saml (COMPOSER)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-1395: Dependency on Vulnerable Third-Party Component
Vulnerable versions: >= 3.0.0, < 3.8.1
Patched in: 3.8.1

Summary:  SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475 

Details:
**Summary**

There is a critical vulnerability on xmlseclibs [CVE-2025-66475](https://github.com/robrichards/xmlseclibs/security/advisories/GHSA-c4cc-x928-vjw9), a dependency of php-saml

Update to the following versions of php-saml which forces the use of patched versions of xmlseclibs:
- [2.21.1](https://github.com/SAML-Toolkits/php-saml/releases/tag/2.21.1)
- [3.8.1](https://github.com/SAML-Toolkits/php-saml/releases/tag/3.8.1)
- [4.3.1](https://github.com/SAML-Toolkits/php-saml/releases/tag/4.3.1)


**Impact**

Signature Wrapping Vulnerabilities allows an attacker to impersonate a user.
GitHub Security Advisory: GHSA-5j8p-438x-rgg5
Package: onelogin/php-saml (COMPOSER)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-1395: Dependency on Vulnerable Third-Party Component
Vulnerable versions: < 2.21.1
Patched in: 2.21.1

Summary:  SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475 

Details:
**Summary**

There is a critical vulnerability on xmlseclibs [CVE-2025-66475](https://github.com/robrichards/xmlseclibs/security/advisories/GHSA-c4cc-x928-vjw9), a dependency of php-saml

Update to the following versions of php-saml which forces the use of patched versions of xmlseclibs:
- [2.21.1](https://github.com/SAML-Toolkits/php-saml/releases/tag/2.21.1)
- [3.8.1](https://github.com/SAML-Toolkits/php-saml/releases/tag/3.8.1)
- [4.3.1](https://github.com/SAML-Toolkits/php-saml/releases/tag/4.3.1)


**Impact**

Signature Wrapping Vulnerabilities allows an attacker to impersonate a user.
GitHub Security Advisory: GHSA-898v-775g-777c
Package: neuron-core/neuron-ai (COMPOSER)
Severity: CRITICAL (CVSS 9.4)
CWE: CWE-250: Execution with Unnecessary Privileges, CWE-284: Improper Access Control
Vulnerable versions: <= 2.8.11
Patched in: 2.8.12

Summary: Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)

Details:
### Impact

`MySQLWriteTool` executes arbitrary SQL provided by the caller using `PDO::prepare()` + `execute()` without semantic restrictions.  

This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as `DROP TABLE`, `TRUNCATE`, `DELETE`, `ALTER`, or privilege-related statements (subject to DB permissions).



**Who is impacted:** Deployments that expose an agent with `MySQLWriteTool` enabled to untrusted input and/or run the tool with a DB user that has broad privileges.

### Patches

**Not patched in:** 2.8.11  

Recommended improvements (even if keeping the tool intentionally powerful):

- Provide a safer API that supports only constrained operations (e.g., `insertRecord`, `updateRecord`) with allowlisted tables/columns.

- Add a policy/allowlist layer (e.g., allow only `INSERT`/`UPDATE` on selected tables; forbid `DROP/TRUNCATE/ALTER/GRANT`).

- Add optional review workflow: log + require human approval for high-risk statements; or “dry-run” mode.

- Document strongly that the tool must not be exposed to untrusted prompts without additional safeguards.



### Workarounds

- Do not enable `MySQLWriteTool` for public/untrusted agents.

- Use a dedicated DB user with **least privilege**:

  - no `DROP`, no `ALTER`, no `GRANT`, no access to sensitive tables unless necessary

- Add an application-layer policy rejecting high-risk statements (`DROP`, `TRUNCATE`, `ALTER`, `GRANT`, `REVOKE`, `CREATE USER`, etc.).

- Implement authorization gating for tool calls (RBAC, allow tool use only for trusted operators).
GitHub Security Advisory: GHSA-j8g6-5gqc-mq36
Package: neuron-core/neuron-ai (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: <= 2.8.11
Patched in: 2.8.12

Summary: Neuron MySQLSelectTool “read-only” bypass via `SELECT ... INTO OUTFILE` (file write → potential RCE)

Details:
### Impact

`MySQLSelectTool` is intended to be a read-only SQL tool (e.g., for LLM agent querying). However, validation based on the first keyword (e.g., `SELECT`) and a forbidden-keyword list does not block file-writing constructs such as `INTO OUTFILE` / `INTO DUMPFILE`.  

As a result, an attacker who can influence the tool input (e.g., prompt injection through a public agent endpoint) may be able to write arbitrary content to files on the DB server.

If the MySQL/MariaDB account has the `FILE` privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory), the impact can escalate to remote code execution on the application host (for example, by writing a PHP web shell).

**Who is impacted:** Deployments that expose an agent using `MySQLSelectTool` to untrusted input and run with overly-permissive DB privileges/configuration.

### Patches

**Not patched in:** 2.8.11  

**Fixed in:** 2.8.12

Recommended fix direction:

- Explicitly reject queries containing: `INTO`, `OUTFILE`, `DUMPFILE`, `LOAD_FILE`, and other file/IO-related functions/clauses.

- Prefer AST-based validation (SQL parser) over keyword checks.

- Constrain allowed tables/columns and disallow multi-statements.

### Workarounds

If you cannot upgrade immediately:

- Remove/disable `MySQLSelectTool` for any agent reachable from untrusted input.

- Ensure DB account used by the tool **does not** have `FILE` privilege.

- Ensure `secure_file_priv` is set to a directory that is **not** web-accessible (or restrict it tightly).

- Add a defensive query filter at the application layer rejecting `INTO OUTFILE`, `INTO DUMPFILE`, `LOAD_FILE`, `;` (multi-statements), and suspicious comment patterns.
GitHub Security Advisory: GHSA-pvcv-q3q7-266g
Package: filament/filament (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-287: Improper Authentication, CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 4.0.0, < 4.3.1
Patched in: 4.3.1

Summary: Filament multi-factor authentication (app) recovery codes can be used multiple times

Details:
### Summary

A flaw in the handling of recovery codes for **app-based multi-factor authentication** allows the same recovery code to be reused indefinitely. This issue does **not** affect email-based MFA. It also only applies when recovery codes are enabled.

### Impact

If an attacker gains access to both the user's password and their recovery codes, they can repeatedly complete MFA without the user's app-based second factor. This weakens the expected security of MFA by turning recovery codes into a static, long-term bypass method.
GitHub Security Advisory: GHSA-92x3-mfjp-j3h3
Package: yungifez/skuul (COMPOSER)
Severity: LOW (CVSS 2.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: <= 2.6.5
Patched in: unpatched

Summary: yungifez Skuul School Management System vulnerable to XSS via SVG

Details:
A weakness has been identified in yungifez Skuul School Management System up to 2.6.5. This vulnerability affects unknown code of the file /dashboard/schools/1/edit of the component SVG File Handler. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
GitHub Security Advisory: GHSA-c4cc-x928-vjw9
Package: robrichards/xmlseclibs (COMPOSER)
Severity: MODERATE (CVSS 6.0)
CWE: CWE-248: Uncaught Exception
Vulnerable versions: <= 3.1.3
Patched in: 3.1.4

Summary: robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation

Details:
### Summary
An authentication bypass vulnerability exists due to a flaw in the libxml2 canonicalization process, which is used by [xmlseclibs](https://github.com/robrichards/xmlseclibs) during document transformation. This weakness allows an attacker to generate a valid signature once and reuse it indefinitely. In practice, a signature created during a previous interaction - or through a misconfigured authentication flow - can be replayed to bypass authentication checks.

### Details
When libxml2’s canonicalization is invoked on an invalid XML input, it may return an empty string rather than a canonicalized node. [xmlseclibs](https://github.com/robrichards/xmlseclibs) then proceeds to compute the DigestValue over this empty string, treating it as if canonicalization succeeded.

https://github.com/robrichards/xmlseclibs/blob/f4131320c6dcd460f1b0c67f16f8bf24ce4b5c3e/src/XMLSecurityDSig.php#L296

### Impact
Digest bypass: By crafting input that causes canonicalization to yield an empty string, the attacker can manipulate validation to pass incorrectly.

Signature replay on empty canonical form: If an empty string has been signed once (e.g., in a prior interaction or via a misconfigured flow), that signature can potentially be replayed to bypass authentication.

### Suggested remediation
Treat canonicalization failures (exceptions or nil/empty outputs) as fatal and abort validation.
Add explicit checks: reject when canonicalize returns nil/empty or raise
GitHub Security Advisory: GHSA-4ccx-wjqp-5fww
Package: librenms/librenms (COMPOSER)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: < 1.31
Patched in: 1.31

Summary: LibreNMS Arbitrary File Read

Details:
The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.
GitHub Security Advisory: GHSA-q5hg-wppq-r2cc
Package: alexusmai/laravel-file-manager (COMPOSER)
Severity: HIGH (CVSS 9.1)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: <= 3.3.1
Patched in: unpatched

Summary: alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

Details:
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.
GitHub Security Advisory: GHSA-rr44-8j7r-jg2q
Package: alexusmai/laravel-file-manager (COMPOSER)
Severity: LOW (CVSS 0.0)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: <= 3.3.1
Patched in: unpatched

Summary: alexusmai laravel-file-manager is vulnerable to Directory Traversal

Details:
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
GitHub Security Advisory: GHSA-mcxq-54f4-mmx5
Package: feehi/cms (COMPOSER)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-20: Improper Input Validation, CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Vulnerable versions: <= 2.1.1
Patched in: unpatched

Summary: FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management

Details:
FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes (or stores in an executable location) without sufficient validation, sanitization, or execution restrictions. An authenticated remote attacker can upload a crafted PHP file and cause the application or web server to execute it, resulting in remote code execution (RCE).
GitHub Security Advisory: GHSA-cchq-397m-q2qm
Package: getgrav/grav (COMPOSER)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: <= 1.7.49
Patched in: unpatched

Summary: Grav CMS is vulnerable to Cross Site Scripting (XSS) in the page editor

Details:
Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page content via a Markdown editor. The editor fails to properly sanitize <script> tags, allowing stored XSS payloads to execute when pages are viewed in the admin interface.
GitHub Security Advisory: GHSA-424m-fj2q-g7vg
Package: aimeos/ai-cms-grapesjs (COMPOSER)
Severity: HIGH (CVSS 7.6)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2025.04.1, < 2025.10.2
Patched in: 2025.10.2

Summary: Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors

Details:
### Impact

Javascript code can be injected by malicious editors for a stored XSS attack if the standard Content Security Policy is disabled.

### Workaround

If the standard CSP rules are active (default in production mode), an exploit isn't possible.

### Credits

Lwin Min Oo <lwinminoo2244@gmail.com>
GitHub Security Advisory: GHSA-424m-fj2q-g7vg
Package: aimeos/ai-cms-grapesjs (COMPOSER)
Severity: HIGH (CVSS 7.6)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2024.04.1, < 2024.10.8
Patched in: 2024.10.8

Summary: Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors

Details:
### Impact

Javascript code can be injected by malicious editors for a stored XSS attack if the standard Content Security Policy is disabled.

### Workaround

If the standard CSP rules are active (default in production mode), an exploit isn't possible.

### Credits

Lwin Min Oo <lwinminoo2244@gmail.com>
GitHub Security Advisory: GHSA-424m-fj2q-g7vg
Package: aimeos/ai-cms-grapesjs (COMPOSER)
Severity: HIGH (CVSS 7.6)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2023.04.1, < 2023.10.15
Patched in: 2023.10.15

Summary: Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors

Details:
### Impact

Javascript code can be injected by malicious editors for a stored XSS attack if the standard Content Security Policy is disabled.

### Workaround

If the standard CSP rules are active (default in production mode), an exploit isn't possible.

### Credits

Lwin Min Oo <lwinminoo2244@gmail.com>
GitHub Security Advisory: GHSA-424m-fj2q-g7vg
Package: aimeos/ai-cms-grapesjs (COMPOSER)
Severity: HIGH (CVSS 7.6)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2022.04.1, < 2022.10.9
Patched in: 2022.10.9

Summary: Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors

Details:
### Impact

Javascript code can be injected by malicious editors for a stored XSS attack if the standard Content Security Policy is disabled.

### Workaround

If the standard CSP rules are active (default in production mode), an exploit isn't possible.

### Credits

Lwin Min Oo <lwinminoo2244@gmail.com>
GitHub Security Advisory: GHSA-424m-fj2q-g7vg
Package: aimeos/ai-cms-grapesjs (COMPOSER)
Severity: HIGH (CVSS 7.6)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2021.04.1, < 2021.10.8
Patched in: 2021.10.8

Summary: Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors

Details:
### Impact

Javascript code can be injected by malicious editors for a stored XSS attack if the standard Content Security Policy is disabled.

### Workaround

If the standard CSP rules are active (default in production mode), an exploit isn't possible.

### Credits

Lwin Min Oo <lwinminoo2244@gmail.com>
GitHub Security Advisory: GHSA-4g25-wj72-chxg
Package: snipe/snipe-it (COMPOSER)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 8.3.4
Patched in: 8.3.4

Summary: Snipe-IT allows stored XSS via the Locations "Country" field

Details:
Snipe-IT before 8.3.4 allows stored XSS via the Locations "Country" field, enabling a low-privileged authenticated user to inject JavaScript that executes in another user's session.
GitHub Security Advisory: GHSA-5xw2-57jx-pgjp
Package: mautic/grapes-js-builder-bundle (COMPOSER)
Severity: HIGH (CVSS 0.0)
CWE: CWE-434: Unrestricted Upload of File with Dangerous Type
Vulnerable versions: >= 6.0.0, < 6.0.7
Patched in: 6.0.7

Summary: GrapesJsBuilder File Upload allows all file uploads

Details:
### Summary

Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. 

### Impact

If the media folder is not restricted from running files this can lead to a remote code execution.
GitHub Security Advisory: GHSA-5xw2-57jx-pgjp
Package: mautic/grapes-js-builder-bundle (COMPOSER)
Severity: HIGH (CVSS 0.0)
CWE: CWE-434: Unrestricted Upload of File with Dangerous Type
Vulnerable versions: >= 5.0.0, < 5.2.9
Patched in: 5.2.9

Summary: GrapesJsBuilder File Upload allows all file uploads

Details:
### Summary

Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. 

### Impact

If the media folder is not restricted from running files this can lead to a remote code execution.
GitHub Security Advisory: GHSA-5xw2-57jx-pgjp
Package: mautic/grapes-js-builder-bundle (COMPOSER)
Severity: HIGH (CVSS 0.0)
CWE: CWE-434: Unrestricted Upload of File with Dangerous Type
Vulnerable versions: >= 4.0.0, < 4.4.18
Patched in: 4.4.18

Summary: GrapesJsBuilder File Upload allows all file uploads

Details:
### Summary

Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. 

### Impact

If the media folder is not restricted from running files this can lead to a remote code execution.
GitHub Security Advisory: GHSA-3fq7-c5m8-g86x
Package: mautic/core (COMPOSER)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-284: Improper Access Control, CWE-862: Missing Authorization
Vulnerable versions: >= 6.0.0, < 6.0.7
Patched in: 6.0.7

Summary: Mautic user without privileged access to the Marketplace can install and uninstall composer packages

Details:
### Summary

A non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.

### Impact

A low-privileged user of the platform can install malicious code to obtain higher privileges.
GitHub Security Advisory: GHSA-3fq7-c5m8-g86x
Package: mautic/core (COMPOSER)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-284: Improper Access Control, CWE-862: Missing Authorization
Vulnerable versions: >= 5.0.0, < 5.2.9
Patched in: 5.2.9

Summary: Mautic user without privileged access to the Marketplace can install and uninstall composer packages

Details:
### Summary

A non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.

### Impact

A low-privileged user of the platform can install malicious code to obtain higher privileges.
GitHub Security Advisory: GHSA-3fq7-c5m8-g86x
Package: mautic/core (COMPOSER)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-284: Improper Access Control, CWE-862: Missing Authorization
Vulnerable versions: >= 4.0.0, < 4.4.18
Patched in: 4.4.18

Summary: Mautic user without privileged access to the Marketplace can install and uninstall composer packages

Details:
### Summary

A non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.

### Impact

A low-privileged user of the platform can install malicious code to obtain higher privileges.
GitHub Security Advisory: GHSA-qgc9-p7cj-jvh6
Package: feehi/feehicms (COMPOSER)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: = 2.1.1
Patched in: unpatched

Summary: FeehiCMS fails to enforce server-side immutability

Details:
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes.
GitHub Security Advisory: GHSA-c2vx-rx6x-m9wj
Package: feehi/feehicms (COMPOSER)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: = 2.1.1
Patched in: unpatched

Summary: FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

Details:
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).
GitHub Security Advisory: GHSA-fww5-m9wc-jcjc
Package: snipe/snipe-it (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), CWE-269: Improper Privilege Management
Vulnerable versions: < 8.3.4
Patched in: 8.3.4

Summary: Snipe-IT is vulnerable to stored cross-site scripting

Details:
Snipe-IT before 8.3.4 allows stored XSS, allowing a low-privileged authenticated user to inject JavaScript that executes in an administrator's session, enabling privilege escalation.
GitHub Security Advisory: GHSA-w756-rf26-7rmr
Package: feehi/feehicms (COMPOSER)
Severity: MODERATE (CVSS 4.6)
CWE: CWE-1021: Improper Restriction of Rendered UI Layers or Frames
Vulnerable versions: <= 2.1.1
Patched in: unpatched

Summary: FeehiCMS is vulnerable to reverse tabnabbing

Details:
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function
GitHub Security Advisory: GHSA-8535-hvm8-2hmv
Package: getgrav/grav (COMPOSER)
Severity: HIGH (CVSS 0.0)
CWE: CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine
Vulnerable versions: < 1.8.0-beta.27
Patched in: 1.8.0-beta.27

Summary: Grav is vulnerable to Server-Side Template Injection (SSTI) via Forms

Details:
### Summary
Having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload. Sensitive information may be contained in the configuration details.

### PoC
Create a simple form with two fields, 'registration-number' and 'hp'. Add a submit button and set the method to POST(screenshot attached below). Form name set to 'hero-form'. Send a POST request with the following payload and you will notice a response with a php array listing the whole Grav configuration details - including plugins(screenshot attached).

registration-number:d643aaaa

hp:vJyifp

__form-name__:hero-form

__unique_form_id__:{{var_dump(_context|slice(0,7))}}


![Screenshot 2025-03-25 at 7 26 02 AM](https://github.com/user-attachments/assets/b92b099b-c07a-4ea2-a3f9-47361ceb9355)

![Screenshot 2025-03-25 at 7 22 58 AM](https://github.com/user-attachments/assets/d9146fd3-5887-4bf8-87d9-78f43ade91c8)


### Impact
Server-Side Template (SST) vulnerability. The vulnerability affects the latest Grav version as of 25th of Match 2025 (1.7.48) with all plugins installed (including forms plugin v.7.4.2) to their latest versions as well.