Vulnerability in EPiServer.Forms
When creating a new user in Episerver is an email to the newly created user generated and sent ?
If so what information is within the Email ?
Locally I am not seeing any emails so cant be sure
It depends on the indentity provider being used but by default no emails are generated and/or sent. If you are using the default ASPNet Indentity provider then this blog describes how to intercept events which you could use to send the email: