A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1. This vulnerability affects unknown code of the file /admin/clients/ of the component User Settings Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-271990 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.271990 | Permissions Required |
| https://vuldb.com/?ctiid.271990 | Permissions Required |
| https://vuldb.com/?submit.372317 | Third Party Advisory |
| https://github.com/DeepMountains/Mirage/blob/main/CVE2-1.md | Broken Link |
Configurations
History
10 Sep 2024, 20:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/DeepMountains/Mirage/blob/main/CVE2-1.md - Broken Link | |
| References | () https://vuldb.com/?id.271990 - Permissions Required | |
| References | () https://vuldb.com/?ctiid.271990 - Permissions Required | |
| References | () https://vuldb.com/?submit.372317 - Third Party Advisory | |
| CPE | cpe:2.3:a:formtools:form_tools:3.1.1:*:*:*:*:*:*:* | |
| First Time |
Formtools form Tools
Formtools |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
21 Jul 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-21 03:15
Updated : 2024-09-10 20:14
NVD link : CVE-2024-6935
Mitre link : CVE-2024-6935
JSON object : View
Products Affected
formtools
- form_tools
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')