CWE-1336

CWE-1336 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-1336, highest CVSS first.

  1. HIGH 8.8CVE-2026-71291public PoC2026-08-05

    Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field de…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.1CVE-2026-71239public PoC2026-08-05

    DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) through Django's Template constructor with no sanitization, in at least three locations: message_previews.py builds an f-string embedding message.subject/message.content d…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 6.1CVE-2026-71286public PoC2026-08-05

    The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the …

    AI risk analysis on Exploit-DB.ai →