Fork-Cms: >> Fork Cms >> 5.9.3 Security Vulnerabilities
A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "start_date" Parameter
CVSS Score
4.8
EPSS Score
0.001
Published
2022-08-12
A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_date" Parameter
CVSS Score
4.8
EPSS Score
0.001
Published
2022-08-12
A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_time" Parameter.
CVSS Score
4.8
EPSS Score
0.0
Published
2022-08-12
A cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "end_date" Parameter
CVSS Score
4.8
EPSS Score
0.0
Published
2022-08-12
SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.
CVSS Score
9.0
EPSS Score
0.003
Published
2022-03-25
SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.
CVSS Score
9.6
EPSS Score
0.003
Published
2022-03-24
Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.
CVSS Score
6.8
EPSS Score
0.003
Published
2022-03-24