CVE-2024-22220

MEDIO 6.3CVE-2024-22220 · Published 21/02/2024 · updated 17/06/2026

In breve

CVE-2024-22220 è una vulnerabilità MEDIO (CVSS 6.3) che riguarda formbank (terminalfour), terminalfour (terminalfour).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.37%, superiore al 30.7% delle vulnerabilità.
Correzione: aggiornare a 7.4.0004 o successiva.

Package	Affected versions	Patched versions
formbank terminalfour	`≤ 2.1.10`	No fix yet
terminalfour terminalfour	`= 7.4.0004≥ 7.4, < 7.4.0004≥ 8.0.0, ≤ 8.3.19`	`7.4.0004`

Description

An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview.

References

docs.terminalfour.com/articles/release-notes-highlights · Release Notes
docs.terminalfour.com/release-notes/security-notices/cve-2024-22220 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free