GHSA-qf2g-q4mc-w7rrMediumCVSS 5.4

Cross-site Scripting in Fork CMS

Published
March 25, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-0145 →

📋 Description

Fork CMS prior to 5.11.1 is vulnerable to stored cross-site scripting. When uploading a new module, the description of the module can contain JavaScript code. The JavaScript code may be executed after uploading the new module and looking at the Details page.

🎯 Affected products1

  • composer/forkcms/forkcms:< 5.11.1

🔗 References (4)