{"action":"Upgrade solspace/craft-freeform to 5.10.16 or later.","affected":[{"fixed":"5.10.16","introduced":"5.0.0"}],"component":"solspace/craft-freeform","cve_ids":["CVE-2025-52122"],"ecosystem":"Packagist","epss":0.0061,"exploited":false,"fixed_versions":["5.10.16"],"ghsa_id":"GHSA-9hp3-f5g8-rccg","id":"tcs_01M5KF02WQ8GHFVDPCV0F88GFM","modified_at":"2025-08-27T18:57:23.187681Z","published_at":"2025-08-27T15:33:15Z","references":["https://osv.dev/vulnerability/GHSA-9hp3-f5g8-rccg","https://nvd.nist.gov/vuln/detail/CVE-2025-52122","https://github.com/TimTrademark/CVE-2025-52122","https://github.com/TimTrademark/CVE-CraftCMS-Freeform","https://github.com/solspace/craft-freeform"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-9hp3-f5g8-rccg","url":"https://osv.dev/vulnerability/GHSA-9hp3-f5g8-rccg"}],"summary":"The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability"}