formtools.org has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 6.3 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Weakness classes
Products
- Form Tools 3
Worst active — by depth score
formtools.org vulnerabilities
CVEs affecting formtools.org, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-103542Medium· 4.3A flaw has been found in formtools.org Form Tools up to 3.1.1
A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smart_fill of the file /global/code/actions.php of the component AJAX Endpoint. This manipulation of the argument url causes server-side request forg…
CVE-2026-103541Medium· 6.3A vulnerability was detected in formtools.org Form Tools up to 3.1.1
A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile of the file global/code/actions.php of the component Ajax Handler. The manipulation results in unrestricted upload. I…
CVE-2026-103540Medium· 6.3A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1
A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The …