Vulnerabilities

TI-2026-65729 CVE-2026-103542 · GHSA-pp9r-qvvc-cvhw

formtools.org Form Tools AJAX Endpoint actions.php smart_fill server-side request forgery

MEDIUM 57

A flaw has been found in formtools.org Form Tools up to 3.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00222 Published 2026-10-01 No fix listed CWE-918

TI-2026-65728 CVE-2026-103541 · GHSA-c82v-cf4h-jfv4

formtools.org Form Tools Ajax actions.php uploadFile unrestricted upload

MEDIUM 57

A vulnerability was detected in formtools.org Form Tools up to 3.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00209 Published 2026-10-01 No fix listed CWE-284

TI-2026-65727 CVE-2026-103540 · GHSA-r99g-f87j-9mpc

formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine

MEDIUM 57

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00237 Published 2026-10-01 No fix listed CWE-1336

TI-2024-06436 CVE-2024-6937 · GHSA-p5wv-3rjg-mp4m

formtools.org Form Tools Import Option List edit.php curl_exec file inclusion

MEDIUM 56

A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00368 Published 2024-07-21 No fix listed CWE-73

TI-2024-06435 CVE-2024-6936 · GHSA-rhmh-7x7r-chvm

formtools.org Form Tools Setting code injection

MEDIUM 56

A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00399 Published 2024-07-21 No fix listed CWE-94

TI-2024-06434 CVE-2024-6935 · GHSA-7w48-pvwh-5mfm

formtools.org Form Tools User Settings Page cross site scripting

MEDIUM 56

A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00315 Published 2024-07-21 No fix listed CWE-79

TI-2024-06433 CVE-2024-6934 · GHSA-j69h-px6j-9v8q

formtools.org Form Tools cross site scripting

MEDIUM 56

A vulnerability classified as problematic has been found in formtools.org Form Tools 3.1.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0039 Published 2024-07-21 No fix listed CWE-79

TI-2024-15113 CVE-2024-22722 · GHSA-jc4p-rhvc-xg67

Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers…

HIGH 67

Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00885 Published 2024-04-11 No fix listed CWE-94

TI-2024-15112 CVE-2024-22721 · GHSA-3435-33m7-pm93

Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to…

MEDIUM 61

Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00188 Published 2024-04-11 No fix listed CWE-352

TI-2024-15110 CVE-2024-22719 · GHSA-f722-mp6c-4849

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL…

HIGH 68

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00541 Published 2024-04-11 No fix listed CWE-89

TI-2024-15109 CVE-2024-22718 · GHSA-5f9x-xph8-qhxf

Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run…

MEDIUM 42

Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00657 Published 2024-04-11 No fix listed CWE-79

TI-2024-15108 CVE-2024-22717 · GHSA-xc4j-5g39-hrv5

Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run…

LOW 27

Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0037 Published 2024-04-11 No fix listed CWE-79

TI-2024-15088 CVE-2024-22637 · GHSA-8cww-gxv8-vfxm

Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS)…

MEDIUM 60

Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0045 Published 2024-01-25 No fix listed CWE-79

TI-2021-15824 CVE-2021-38144 · GHSA-2jhv-7392-ffcx

An issue was discovered in Form Tools through 3.0.20.

LOW 26

An issue was discovered in Form Tools through 3.0.20.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00916 Published 2021-08-31 No fix listed CWE-79

TI-2021-15823 CVE-2021-38143 · GHSA-7jr4-xg2j-23mp

An issue was discovered in Form Tools through 3.0.20.

LOW 30

An issue was discovered in Form Tools through 3.0.20.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01353 Published 2021-08-31 No fix listed CWE-79

TI-2021-15825 CVE-2021-38145 · GHSA-3x88-87x6-rhc4

An issue was discovered in Form Tools through 3.0.20.

MEDIUM 46

An issue was discovered in Form Tools through 3.0.20.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02152 Published 2021-08-31 No fix listed CWE-89

Vulnerabilities

Filters