Formstone

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Formstone records in CISA KEV

No Formstone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Formstone 1 record LOW

Records

1 record in Formstone · all components

TI-2020-16262 CVE-2020-26768 · GHSA-wc29-h54q-q8qx

Formstone <=1.4.16 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability…

LOW 30

Formstone <=1.4.16 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper validation of user supplied input in the upload-target.php and upload-chunked.php files.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01277 Published 2021-01-07 Fixed in 1.4.17 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0