Jeroen Voortman

Pixlogix_Flexibleforms can also be used to inject malicious code into Magento 1 stores, we discovered yesterday. The extension doesn't have any form of protection against unwanted file uploads. A file...

Every version to be honest. I discovered the vulnerability in v0.7.0, but the latest version (v1.0.13) has still got the same vulnerability built in. The module doesn't check for allowed...