CVE-2020-26768

Formstone <=1.4.16 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper validation of user supplied input in the upload-target.php and upload-chunked.php files. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked or visited. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials, force malware execution, user redirection and others.

We have discovered 181 live websites that are affected by CVE-2020-26768.

Run a Free Instant Scan



Affected Software

Product  Formstone
Category JavaScript Libraries
Vulnerable Domains181 live websites (55% of Formstone install base)
Vulnerable Versions
  • from 0 through 1.4.16
Vulnerable Versions Count19 versions ( 86% of all versions)



Details

  • Published - Jan 7, 2021
  • Updated - Aug 4, 2024

Website Distribution by Country

Number of websites using CVE-2020-26768
United States48 websites


Austria17 websites
Germany17 websites
Italy14 websites
Japan12 websites
Belgium8 websites
Russia8 websites
Ukraine6 websites
Spain5 websites
Canada5 websites

Website Distribution by TLD

Number of websites using CVE-2020-26768
.com61 websites
.at18 websites
.it13 websites
.de11 websites
.net9 websites
.ru7 websites
.ca5 websites
.jp5 websites
.be3 websites
.info3 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2020-26768

Top websites that are affected by CVE-2020-26768. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***********.com United States**,***
******.us United States**,***
*******.com Romania***,***
***********.com United States***,***
*****.info France***,***
************.com United States***,***
**************.com United States***,***
*******.com United States***,***
**************.ca United States***,***
*******.de Germany*,***,***
See full domain list

FAQ

A total of 181 websites have been identified as vulnerable to CVE-2020-26768, based on global website indexing conducted by WebTechSurvey.
The Formstone is affected by the CVE-2020-26768 vulnerability.
Formstone versions up to and including 1.4.16 are vulnerable to CVE-2020-26768.