Threats tagged 'ghsa-8648-mq73-m727'

A security vulnerability exists in Naichen ThinkCMF up to version 8.0.7 in the Email Template component. The flaw is in the MailController::templatePut function, leading to improper neutralization of special elements in the template engine. This vulnerability can be exploited remotely and has been publicly disclosed. The vendor has not responded to the disclosure, and no patch information is available. The CVSS score is 4.7, indicating a medium severity level.