https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6937.htmlhttps://patchthecve.com/cve/CVE-2024-6937.htmlWed, 17 Jun 2026 08:19:01 +0000LOW 2.7: A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1. Affected is the function curl_exec of the file /admin/forms/option_lists/edit.php of the component Import Option List. The manipulation of the argument url leads to file inclusion. It is possible to lahttps://patchthecve.com/cve/CVE-2024-6936.htmlhttps://patchthecve.com/cve/CVE-2024-6936.htmlWed, 17 Jun 2026 08:19:01 +0000LOW 2.7: A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1. This issue affects some unknown processing of the file /admin/settings/index.php?page=accounts of the component Setting Handler. The manipulation of the argument Page Theme leads to code injectionhttps://patchthecve.com/cve/CVE-2024-6935.htmlhttps://patchthecve.com/cve/CVE-2024-6935.htmlWed, 17 Jun 2026 08:19:01 +0000LOW 2.4: A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1. This vulnerability affects unknown code of the file /admin/clients/ of the component User Settings Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2024-6934.htmlhttps://patchthecve.com/cve/CVE-2024-6934.htmlWed, 17 Jun 2026 08:19:01 +0000LOW 2.4: A vulnerability classified as problematic has been found in formtools.org Form Tools 3.1.1. This affects an unknown part of the file /admin/forms/add/step2.php?submission_type=direct. The manipulation of the argument Form URL leads to cross site scripting. It is possible to initiate the attack remothttps://patchthecve.com/cve/CVE-2024-22722.htmlhttps://patchthecve.com/cve/CVE-2024-22722.htmlWed, 17 Jun 2026 07:11:41 +0000HIGH 7.2: Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.https://patchthecve.com/cve/CVE-2024-22721.htmlhttps://patchthecve.com/cve/CVE-2024-22721.htmlWed, 17 Jun 2026 07:11:41 +0000MEDIUM 6.3: Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link.https://patchthecve.com/cve/CVE-2024-22719.htmlhttps://patchthecve.com/cve/CVE-2024-22719.htmlWed, 17 Jun 2026 07:11:41 +0000HIGH 8.1: SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client.https://patchthecve.com/cve/CVE-2024-22718.htmlhttps://patchthecve.com/cve/CVE-2024-22718.htmlWed, 17 Jun 2026 07:11:41 +0000CRITICAL 9.6: Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL.https://patchthecve.com/cve/CVE-2024-22717.htmlhttps://patchthecve.com/cve/CVE-2024-22717.htmlWed, 17 Jun 2026 07:11:41 +0000MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application.https://patchthecve.com/cve/CVE-2024-22637.htmlhttps://patchthecve.com/cve/CVE-2024-22637.htmlWed, 17 Jun 2026 07:11:37 +0000MEDIUM 6.1: Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=2.