PoC Archive PoC Archive

tag

Twig

High
Shopware Twig Rendered-View Code Injection Regression (CVE-2026-23498)
CVE-2026-23498· Shopware (shopware/shopware, shopware/core) patched
Critical
Contact Form by Supsystic <= 1.7.36 Unauthenticated SSTI to RCE (CVE-2026-4257)
CVE-2026-4257· Contact Form by Supsystic (WordPress plugin) unpatched