Fork CMS Cross-site Scripting Vulnerability

2022-05-2417:18:45

Google

osv.dev

0.001 Low

EPSS

Percentile

34.0%

JSON

Fork before 5.8.3 allows XSS via navigation_title or title.

CPENameOperatorVersion
forkcms/forkcmseq5.4.1
forkcms/forkcmseq4.0.6
forkcms/forkcmseq3.6.3
forkcms/forkcmseq3.8.3
forkcms/forkcmseq5.2.3
forkcms/forkcmseq5.8.1
forkcms/forkcmseq4.1.1
forkcms/forkcmseq4.3.1
forkcms/forkcmseq3.9.6
forkcms/forkcmseq4.5.1

Name	Operator	Version
forkcms/forkcms	eq	5.4.1
forkcms/forkcms	eq	4.0.6
forkcms/forkcms	eq	3.6.3
forkcms/forkcms	eq	3.8.3
forkcms/forkcms	eq	5.2.3
forkcms/forkcms	eq	5.8.1
forkcms/forkcms	eq	4.1.1
forkcms/forkcms	eq	4.3.1
forkcms/forkcms	eq	3.9.6
forkcms/forkcms	eq	4.5.1