CVE-2024-22220

MEDIO 6.3CVE-2024-22220 · Published 21/02/2024 · updated 17/06/2026

En resumen

CVE-2024-22220 es una vulnerabilidad MEDIO (CVSS 6.3) que afecta a formbank (terminalfour), terminalfour (terminalfour).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.37%, mayor que el 30.7% de las vulnerabilidades.
Solución: actualizar a 7.4.0004 o posterior.

Package	Affected versions	Patched versions
formbank terminalfour	`≤ 2.1.10`	No fix yet
terminalfour terminalfour	`= 7.4.0004≥ 7.4, < 7.4.0004≥ 8.0.0, ≤ 8.3.19`	`7.4.0004`

Description

An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview.

References

docs.terminalfour.com/articles/release-notes-highlights · Release Notes
docs.terminalfour.com/release-notes/security-notices/cve-2024-22220 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free