Form Tools vulnerabilities

2 known vulnerabilities in Form Tools from Formtools. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  form_tools: Improper Control of Generation of Code

  CVE-2024-22722Apr 11, 2024Formtools

  Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.

• 9.6 Critical severity

  Form Tools: Improper Neutralization of Input During Web Page Generation

  CVE-2024-22718Apr 11, 2024Formtools

  Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL.