Priority HIGH 68
SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2024-04-11 · No fix listed CWE-89
Priority HIGH 67
Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00885 · Published 2024-04-11 · No fix listed CWE-94
Priority MEDIUM 61
Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00188 · Published 2024-04-11 · No fix listed CWE-352
Priority MEDIUM 60
Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=2.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0045 · Published 2024-01-25 · No fix listed CWE-79
Priority MEDIUM 57
A flaw has been found in formtools.org Form Tools up to 3.1.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00222 · Published 2026-10-01 · No fix listed CWE-918
Priority MEDIUM 57
A vulnerability was detected in formtools.org Form Tools up to 3.1.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00209 · Published 2026-10-01 · No fix listed CWE-284
Priority MEDIUM 57
A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00237 · Published 2026-10-01 · No fix listed CWE-1336
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00368 · Published 2024-07-21 · No fix listed CWE-73
Priority MEDIUM 56
A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00399 · Published 2024-07-21 · No fix listed CWE-94
Priority MEDIUM 56
A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00315 · Published 2024-07-21 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability classified as problematic has been found in formtools.org Form Tools 3.1.1.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.0039 · Published 2024-07-21 · No fix listed CWE-79
Priority MEDIUM 46
An issue was discovered in Form Tools through 3.0.20.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02152 · Published 2021-08-31 · No fix listed CWE-89
Priority MEDIUM 42
Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00657 · Published 2024-04-11 · No fix listed CWE-79
Priority LOW 30
An issue was discovered in Form Tools through 3.0.20.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01353 · Published 2021-08-31 · No fix listed CWE-79
Priority LOW 27
Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0037 · Published 2024-04-11 · No fix listed CWE-79
Priority LOW 26
An issue was discovered in Form Tools through 3.0.20.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00916 · Published 2021-08-31 · No fix listed CWE-79
THREATIST.IORead the docs