Prototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause other impacts via the functions setDefaults, mergeBranch, and Object.setObjectValue.
CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')