CVE-2024-37764

MachForm up to version 19 is affected by an authenticated stored cross-site scripting...

CVE-2024-37763

MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...

CVE-2024-37764

MachForm up to version 19 is affected by an authenticated stored cross-site scripting...

CVE-2024-37764

MachForm versions up to 19 are vulnerable to an authenticated stored cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically due to a lack of validation or sanitization for POST request parameters in the https:///save_form.p...

CVE-2024-37763

MachForm versions up to v19 are vulnerable to an unauthenticated stored cross-site scripting (XSS) flaw. The root cause is a lack of input sanitization in the body of a POST request when using a form with the text signature enabled. A malicious payload can be injected into dynamic parameters such...

CVE-2024-37763

MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...