Security Advisory
CVE-2020-11056
7.4
HIGH
Vulnerability Description
In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0.
Published Date
May 7, 2020
Official Source
NIST NVD Advisory