Lucene search
GoogleOSV:GHSA-QF2G-Q4MC-W7RRHistoryMar 25, 2022 - 12:00 a.m.
Cross-site Scripting in Fork CMS
2022-03-2500:00:34
Google
osv.dev
15
fork cms
cross-site scripting
vulnerability
stored
javascript code
details page
module
upload
EPSS
0.001
Percentile
21.4%
Fork CMS prior to 5.11.1 is vulnerable to stored cross-site scripting. When uploading a new module, the description of the module can contain JavaScript code. The JavaScript code may be executed after uploading the new module and looking at the Details page.
Related
github
github
Cross-site Scripting in Fork CMS
2022-03-25 00:00:34
prion
prion
Cross site scripting
2022-03-24 11:15:00
veracode
veracode
Cross-site Scripting (XSS)
2022-03-25 06:06:30
nvd
nvd
CVE-2022-0145
2022-03-24 11:15:08
huntr
huntr
Cross-site Scripting (XSS) - Stored in forkcms/forkcms
2021-10-25 20:56:50
cve
cve
CVE-2022-0145
2022-03-24 11:15:08
cvelist
cvelist
CVE-2022-0145 Cross-site Scripting (XSS) - Stored in forkcms/forkcms
2022-03-24 10:35:10
osv
osv
CVE-2022-0145
2022-03-24 11:15:00