CVE-2024-25293: Mjml App

Critical severity, CVSS 9.3. EPSS: 1% chance of exploitation in the next 30 days.

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute.

Affected products

• Mjml Mjml App: version 3.0.4 only; version 3.1.0 only

Published 2024-03-01. Last modified 2026-06-17.