critical9.6
CVE-2024-22718
Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL.
Impact
Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Formtools | Form Tools | Version 3.1.1 |