CVE-2022-22789: Charactell Formstorm

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Charactell - FormStorm Enterprise Account takeover – An attacker can modify (add, remove and update) passwords file for all the users. The xx_users.ini file in the FormStorm folder contains usernames in cleartext and an obfuscated password. Malicious user can take over an account by replacing existing password in the file.

Affected products

• Charactell Formstorm: version 9.00.065 only

Published 2022-01-25. Last modified 2026-06-17.