Solspace Craft-freeform vulnerabilities

• solspace craft-freeform Solspace Freeform: Limited Twig template injection via submitted field values CVE-2026-73858 Public exploitFix available 5.3 MediumSeptember 23, 2026
• solspace freeform, craft-freeform +1 more Solspace Freeform plugin affected by Stored Cross-Site Scripting (XSS) in Freeform Craft Plugin CP UI (builder/integrations) CVE-2026-26188 Fix available 5.1 MediumJanuary 22, 2026