CVE-2021-38143

An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when...

Form Tools Cross-Site Script Vulnerabilities

Form Tools is a PHP/MySQL script used to manage your forms and data.A cross-site scripting vulnerability exists in Form Tools 3.0.20 and earlier. An attacker could exploit this vulnerability to trigger a stored cross-site scripting attack when viewing a client list...