Browse CVEs

CRITICAL 9.6 CVE-2024-22718 Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application UR… Form Tools No fix yet Fix from $2,3002024-04-11 HIGH 8.1 CVE-2024-22719 SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client. Form Tools No fix yet Fix from $1,9502024-04-11 HIGH 7.2 CVE-2024-22722 Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the… Form Tools No fix yet Fix from $1,9502024-04-11 MEDIUM 6.3 CVE-2024-22721 Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link. Form Tools No fix yet Fix from $1,6002024-04-11 MEDIUM 6.1 CVE-2024-22717 Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application. Form Tools No fix yet Fix from $1,6002024-04-11 MEDIUM 6.1 CVE-2024-22637 Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=… Form Tools No fix yet Fix from $1,6002024-01-25 CRITICAL 9.8 CVE-2021-38145 An issue was discovered in Form Tools through 3.0.20. SQL Injection can occur via the export_group_id field when a low-privileged user (client) tries… Core after 3.0.20 Fix from $2,3002021-08-31 MEDIUM 6.1 CVE-2021-38143 An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and… Core after 3.0.20 Fix from $1,6002021-08-31 MEDIUM 5.4 CVE-2021-38144 An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submission_id par… Core after 3.0.20 Fix from $1,6002021-08-31