Skip to content
OpenAdvisories

Product · pluginsGLPI

formcreator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2023-33971

    Formcreator vulnerable to stored XSS from ##FULLFORM##

    Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of `##FUL…

    pluginsGLPI formcreator