Formtools Core
3 CVEs affecting Formtools Core. Latest disclosed: 2021-08-31. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38145 | Critical | 9.8 | 2021-08-31 | An issue was discovered in Form Tools through 3.0.20. SQL Injection can occur via the export_group_id field when a low-privileged user (client) tries to export… |
CVE-2021-38143 | Medium | 6.1 | 2021-08-31 | An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed w… |
CVE-2021-38144 | Medium | 5.4 | 2021-08-31 | An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submission_id parameter, e… |