CVE-2024-22220

An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview.

• CWE-79

• https://docs.terminalfour.com/articles/release-notes-highlights/Release Notes
• https://docs.terminalfour.com/release-notes/security-notices/cve-2024-22220/Vendor Advisory
• https://docs.terminalfour.com/articles/release-notes-highlights/Release Notes
• https://docs.terminalfour.com/release-notes/security-notices/cve-2024-22220/Vendor Advisory

Published

Feb 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22213Deck is a kanban style organization tool aimed at personal p…5.4
• CVE-2024-22216In default installations of Microchip maxView Storage Manage…10
• CVE-2024-22217A Server-Side Request Forgery (SSRF) vulnerability in Termin…6.5
• CVE-2024-22218XML External Entity (XXE) vulnerability in Terminalfour 8.0.…8.8
• CVE-2024-22219XML External Entity (XXE) vulnerability in Terminalfour 8.0.…6.3
• CVE-2024-2222The Advanced Classifieds & Directory Pro plugin for WordPres…4.3
• CVE-2024-22221 Dell Unity, versions prior to 5.4, contains SQL Injection v…6.5
• CVE-2024-22222 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-22223 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-22224 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-22225 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-22226 Dell Unity, versions prior to 5.4, contain a path traversal…6.5