CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11056

In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.2%

CVSS Severity

CVSS v3 Score 7.4

CVSS v2 Score 6.5

References

Products affected by CVE-2020-11056

Barrelstrengthdesign » Sprout Forms » Version: 0.7.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:0.7.1
Barrelstrengthdesign » Sprout Forms » Version: 0.8.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:0.8.1
Barrelstrengthdesign » Sprout Forms » Version: 0.8.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:0.8.2
Barrelstrengthdesign » Sprout Forms » Version: 0.8.3

cpe:2.3:a:barrelstrengthdesign:sprout_forms:0.8.3
Barrelstrengthdesign » Sprout Forms » Version: 0.8.4

cpe:2.3:a:barrelstrengthdesign:sprout_forms:0.8.4
Barrelstrengthdesign » Sprout Forms » Version: 0.8.6

cpe:2.3:a:barrelstrengthdesign:sprout_forms:0.8.6
Barrelstrengthdesign » Sprout Forms » Version: 0.8.7

cpe:2.3:a:barrelstrengthdesign:sprout_forms:0.8.7
Barrelstrengthdesign » Sprout Forms » Version: 0.9.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:0.9.1
Barrelstrengthdesign » Sprout Forms » Version: 1.0.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:1.0.0
Barrelstrengthdesign » Sprout Forms » Version: 1.0.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:1.0.1
Barrelstrengthdesign » Sprout Forms » Version: 1.0.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:1.0.2
Barrelstrengthdesign » Sprout Forms » Version: 1.0.3

cpe:2.3:a:barrelstrengthdesign:sprout_forms:1.0.3
Barrelstrengthdesign » Sprout Forms » Version: 1.1.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:1.1.0
Barrelstrengthdesign » Sprout Forms » Version: 2.1.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.1.0
Barrelstrengthdesign » Sprout Forms » Version: 2.4.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.4.0
Barrelstrengthdesign » Sprout Forms » Version: 2.5.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.5.0
Barrelstrengthdesign » Sprout Forms » Version: 2.5.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.5.1
Barrelstrengthdesign » Sprout Forms » Version: 2.5.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.5.2
Barrelstrengthdesign » Sprout Forms » Version: 2.5.3

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.5.3
Barrelstrengthdesign » Sprout Forms » Version: 2.6.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.6.0
Barrelstrengthdesign » Sprout Forms » Version: 2.6.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.6.1
Barrelstrengthdesign » Sprout Forms » Version: 2.6.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.6.2
Barrelstrengthdesign » Sprout Forms » Version: 2.6.3

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.6.3
Barrelstrengthdesign » Sprout Forms » Version: 2.6.4

cpe:2.3:a:barrelstrengthdesign:sprout_forms:2.6.4
Barrelstrengthdesign » Sprout Forms » Version: 3.0.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.0.0
Barrelstrengthdesign » Sprout Forms » Version: 3.0.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.0.1
Barrelstrengthdesign » Sprout Forms » Version: 3.0.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.0.2
Barrelstrengthdesign » Sprout Forms » Version: 3.1.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.1.0
Barrelstrengthdesign » Sprout Forms » Version: 3.2.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.2.0
Barrelstrengthdesign » Sprout Forms » Version: 3.2.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.2.1
Barrelstrengthdesign » Sprout Forms » Version: 3.2.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.2.2
Barrelstrengthdesign » Sprout Forms » Version: 3.2.3

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.2.3
Barrelstrengthdesign » Sprout Forms » Version: 3.2.4

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.2.4
Barrelstrengthdesign » Sprout Forms » Version: 3.3.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.0
Barrelstrengthdesign » Sprout Forms » Version: 3.3.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.1
Barrelstrengthdesign » Sprout Forms » Version: 3.3.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.2
Barrelstrengthdesign » Sprout Forms » Version: 3.3.3

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.3
Barrelstrengthdesign » Sprout Forms » Version: 3.3.4

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.4
Barrelstrengthdesign » Sprout Forms » Version: 3.3.5

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.5
Barrelstrengthdesign » Sprout Forms » Version: 3.3.6

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.6
Barrelstrengthdesign » Sprout Forms » Version: 3.3.7

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.7
Barrelstrengthdesign » Sprout Forms » Version: 3.3.9

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.3.9
Barrelstrengthdesign » Sprout Forms » Version: 3.4.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.4.0
Barrelstrengthdesign » Sprout Forms » Version: 3.4.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.4.1
Barrelstrengthdesign » Sprout Forms » Version: 3.4.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.4.2
Barrelstrengthdesign » Sprout Forms » Version: 3.4.3

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.4.3
Barrelstrengthdesign » Sprout Forms » Version: 3.5.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.5.0
Barrelstrengthdesign » Sprout Forms » Version: 3.5.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.5.1
Barrelstrengthdesign » Sprout Forms » Version: 3.6.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.0
Barrelstrengthdesign » Sprout Forms » Version: 3.6.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.1
Barrelstrengthdesign » Sprout Forms » Version: 3.6.10

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.10
Barrelstrengthdesign » Sprout Forms » Version: 3.6.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.2
Barrelstrengthdesign » Sprout Forms » Version: 3.6.4

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.4
Barrelstrengthdesign » Sprout Forms » Version: 3.6.5

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.5
Barrelstrengthdesign » Sprout Forms » Version: 3.6.6

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.6
Barrelstrengthdesign » Sprout Forms » Version: 3.6.7

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.7
Barrelstrengthdesign » Sprout Forms » Version: 3.6.8

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.8
Barrelstrengthdesign » Sprout Forms » Version: 3.6.9

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.6.9
Barrelstrengthdesign » Sprout Forms » Version: 3.7.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.7.0
Barrelstrengthdesign » Sprout Forms » Version: 3.7.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.7.1
Barrelstrengthdesign » Sprout Forms » Version: 3.7.1.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.7.1.1
Barrelstrengthdesign » Sprout Forms » Version: 3.7.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.7.2
Barrelstrengthdesign » Sprout Forms » Version: 3.8.0

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.0
Barrelstrengthdesign » Sprout Forms » Version: 3.8.0.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.0.1
Barrelstrengthdesign » Sprout Forms » Version: 3.8.0.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.0.2
Barrelstrengthdesign » Sprout Forms » Version: 3.8.1

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.1
Barrelstrengthdesign » Sprout Forms » Version: 3.8.2

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.2
Barrelstrengthdesign » Sprout Forms » Version: 3.8.3

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.3
Barrelstrengthdesign » Sprout Forms » Version: 3.8.4

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.4
Barrelstrengthdesign » Sprout Forms » Version: 3.8.5

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.5
Barrelstrengthdesign » Sprout Forms » Version: 3.8.6

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.6
Barrelstrengthdesign » Sprout Forms » Version: 3.8.7

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.7
Barrelstrengthdesign » Sprout Forms » Version: 3.8.8

cpe:2.3:a:barrelstrengthdesign:sprout_forms:3.8.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11056

Products

Pricing

Contact Us