Flextype v1.0.0-alpha.3 Stored Arbitrary Expression Injection in ExpressionsDirective Allows Arbitrary File Read
Flextype CMS v1.0.0-alpha.3 stores unsanitized expressions in entries, letting privileged authenticated users achieve arbitrary file read when fields are parsed.