https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:07:43.655192+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2023-00373 cnvd-2023-00373 2026-10-04T23:07:43.734159+00:00 cnvd-2023-00373 https://cve.radiocsirt.org/vuln/euvd-2026-30162 EUVD-2026-30162 2026-10-04T23:07:43.734203+00:00 EUVD-2026-30162 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38143 fkie_cve-2021-38143 2026-10-04T23:07:43.734218+00:00

An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when the admin tries to see the client list. This type of XSS (stored) can lead to the extraction of the PHPSESSID cookie belonging to the admin.

 https://cve.radiocsirt.org/vuln/ghsa-7jr4-xg2j-23mp GHSA-7jr4-xg2j-23mp 2026-10-04T23:07:43.734267+00:00

An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when the admin tries to see the client list. This type of XSS (stored) can lead to the extraction of the PHPSESSID cookie belonging to the admin.

 https://cve.radiocsirt.org/vuln/gsd-2021-38143 gsd-2021-38143 2026-10-04T23:07:43.734288+00:00 gsd-2021-38143