An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature.
CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine