https://github.com/factionsecurity/faction/releases/tag/1.6.8 introduced custom user variables to vulnerability templates. These can have many types but the List data type seems to be broken when creating new default vulnerability templates:

The references custom variable can't be changed