Vendors / formtools.org Records 16 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now formtools.org records in CISA KEV No formtools.org vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 68
SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2024-04-11 · No fix listed CWE-89
Priority HIGH 67
Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00885 · Published 2024-04-11 · No fix listed CWE-94
Priority MEDIUM 61
Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link.
CVSS 3.1 MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00188 · Published 2024-04-11 · No fix listed CWE-352
Priority MEDIUM 60
Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=2.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0045 · Published 2024-01-25 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00368 · Published 2024-07-21 · No fix listed CWE-73
Priority MEDIUM 56
A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00399 · Published 2024-07-21 · No fix listed CWE-94
Priority MEDIUM 56
A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00315 · Published 2024-07-21 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability classified as problematic has been found in formtools.org Form Tools 3.1.1.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.0039 · Published 2024-07-21 · No fix listed CWE-79
Priority MEDIUM 42
Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00657 · Published 2024-04-11 · No fix listed CWE-79
Priority LOW 27
Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0037 · Published 2024-04-11 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 2 12 0 0
THREATIST.IORead the docs