
RCE with Server-Side Template Injection by Nairuz Abulhul Server-side template injection is a web application vulnerability that occurs in template-generated applications. User inputs get embedded dynamically into the template variables and rendered on the web pages. Like any injection, the leading cause of this is unsensitized inputs; we trust the....
Author

All articles are available in XML format through the Archive endpoint. The evaluation of the injected payload was 49, as can be phrazle seen in the picture below. I have now shown that the title parameter does indeed have a security hole.