Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Form Tools CRITICAL 9.6
CVE-2024-22718

Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application UR…

No fix yet
Fix from $2,300 2024-04-11
Form Tools HIGH 8.1
CVE-2024-22719

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client.

No fix yet
Fix from $1,950 2024-04-11
Form Tools HIGH 7.2
CVE-2024-22722

Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the…

No fix yet
Fix from $1,950 2024-04-11
Form Tools MEDIUM 6.3
CVE-2024-22721

Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link.

No fix yet
Fix from $1,600 2024-04-11
Form Tools MEDIUM 6.1
CVE-2024-22717

Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application.

No fix yet
Fix from $1,600 2024-04-11
Form Tools MEDIUM 6.1
CVE-2024-22637

Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=…

No fix yet
Fix from $1,600 2024-01-25
Core CRITICAL 9.8
CVE-2021-38145

An issue was discovered in Form Tools through 3.0.20. SQL Injection can occur via the export_group_id field when a low-privileged user (client) tries…

Fix: after 3.0.20
Fix from $2,300 2021-08-31
Core MEDIUM 6.1
CVE-2021-38143

An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and…

Fix: after 3.0.20
Fix from $1,600 2021-08-31
Core MEDIUM 5.4
CVE-2021-38144

An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submission_id par…

Fix: after 3.0.20
Fix from $1,600 2021-08-31