CVE-2024-22722

7.2 highEPSS 0.9%

High (7.2) in formtools form tools. EPSS 0.9% chance of exploitation in the next 30 days.

Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-04-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

formtools:form_tools

References

https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/

Check your stack JSON