CVE-2024-6936 is a code injection vulnerability in formtools.org Form Tools 3.1.1 that allows remote attackers to execute arbitrary code. This vulnerability affects the Setting Handler component via the /admin/settings/index.php?page=accounts file by manipulating the Page Theme argument. The exploit is publicly available, meaning attackers can easily leverage it. Although the CVSS score is 4.9, indicating a medium severity, the SOCRadar Vulnerability Risk Score (SVRS) is 38, reflecting a relatively low immediate risk based on current threat intelligence. However, the existence of a public exploit makes this CVE significant, as it lowers the barrier to entry for attackers. If the SVRS increases over time, immediate patching would be required. This vulnerability poses a risk of unauthorized access and control over the affected Form Tools application.