CVE-2024-22722

PoC —

CVSS 3.1

7.2 high

EPSS

<1%p57

Published

Apr 11, 2024 (Apr 11, 2024)

Modified

Jun 17, 2026

Description

Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.

Vendors: formtools
Products: form tools
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.