Formtools uses outdated jQuery 1.5.1 in global/scripts/jquery.js
This file is in version 1.5.1 and has a security vulnerability fixed in jQuery 1.9.0
CVE-2012-6708 / XSS
More details here:
https://bugs.jquery.com/ticket/11290
I think jQuery should be updated in Formtools.