CVE-2024-6934 - formtools.org Form Tools cross site scripting

Back Back to CVE browser

MEDIUM

formtools.org Form Tools cross site scripting

Published Jul 21, 2024

5.1

MEDIUM

CVSS 4.0

EPSS 0.39%

Description

A vulnerability classified as problematic has been found in formtools.org Form Tools 3.1.1. This affects an unknown part of the file /admin/forms/add/step2.php?submission_type=direct. The manipulation of the argument Form URL leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271989 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Formtools.org Product Form Tools Default
n/a
- Version
  3.1.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Formtools.org

Form Tools

n/a

Version	Status	Constraints
3.1.1	affected	-

Vendor Formtools Product Form Tools Default
n/a
- Version
  3.1.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Formtools

Form Tools

n/a

Version	Status	Constraints
3.1.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47920
Advisory
https://github.com/DeepMountains/Mirage/blob/main/CVE-2.md
exploitBroken Link
https://vuldb.com/?ctiid.271989
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.271989
vdb-entrytechnical-descriptionThird Party Advisory
https://vuldb.com/?submit.372309
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47920		Advisory
https://github.com/DeepMountains/Mirage/blob/main/CVE-2.md		exploitBroken Link
https://vuldb.com/?ctiid.271989		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.271989		vdb-entrytechnical-descriptionThird Party Advisory
https://vuldb.com/?submit.372309		third-party-advisoryThird Party Advisory