Lucene search
+L

221 matches found

Prion
Prion
•added 2022/03/24 5:15 p.m.•14 views

Sql injection

SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1...

4.3CVSS7.9AI score0.01128EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2022/03/24 11:15 a.m.•16 views

CVE-2022-0145

Cross-site Scripting XSS - Stored in GitHub repository forkcms/forkcms prior to 5.11.1...

6.8CVSS6.3AI score0.00681EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/03/24 12:00 a.m.•2 views

PT-2022-12998

Name of the Vulnerable Software and Affected Versions Fork CMS versions prior to 5.11.1 Description The issue concerns a SQL injection vulnerability. When deleting submissions that belong to a form created with the FormBuilder module, the parameter id is vulnerable to SQL injection. Recommendatio...

9.6CVSS5.8AI score0.01128EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2022/03/24 12:00 a.m.•1 views

PT-2022-12994

Name of the Vulnerable Software and Affected Versions Fork CMS versions prior to 5.11.1 Description The issue is related to stored Cross-site Scripting XSS in the GitHub repository forkcms/forkcms. When uploading a new module, the description of the module can contain JavaScript code, which may b...

6.8CVSS5.9AI score0.00681EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2022/03/24 12:00 a.m.•20 views

forkcms 跨站脚本漏洞

forkcms is a software application. A CMS. A security vulnerability exists in forkcms prior to 5.11.1. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

6.8CVSS6.3AI score0.00681EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/02/10 10:29 p.m.•50 views

Cross-site scripting in forkcms

Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigationtitle" parameter and the "title" parameter in /private/en/pages/add...

6.1CVSS6.2AI score0.00844EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/02/10 10:29 p.m.•56 views

GHSA-VP4X-94FF-2CMV Cross-site scripting in forkcms

Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigationtitle" parameter and the "title" parameter in /private/en/pages/add...

6.1CVSS6.2AI score0.00844EPSS
SaveExploits0References2
Veracode
Veracode
•added 2021/10/26 1:36 p.m.•24 views

Cross-site Scripting (XSS)

forkcms/forkcms is vulnerable to cross-site scripting attacks. The vulnerability exists because the 'Displayname' input field in 'Profiles' module is not properly encoded, which allows a malicious attacker to inject and execute arbitrary javascript...

5.4CVSS3.2AI score0.00595EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2021/10/26 12:00 a.m.•52 views

Fork CMS Cross-Site Scripting Vulnerability (CNVD-2021-83552)

Fork CMS is an open source content management system CMS developed using PHP. The system contains blogs , questions and answers , forms and other modules . A cross-site scripting vulnerability exists in Fork CMS Content Management System version 5.8.0, which can be exploited by an attacker to...

5.4CVSS5.4AI score0.00595EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/25 7:43 p.m.•68 views

GHSA-3374-7H99-XR85 Cross-site scripting in forkcms

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS5.3AI score0.00595EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/10/25 7:43 p.m.•49 views

Cross-site scripting in forkcms

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS5.4AI score0.00595EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2021/10/22 8:15 p.m.•41 views

CVE-2020-23049

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00595EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/22 8:15 p.m.•22 views

CVE-2020-23049

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS6.2AI score
SaveExploits0References1
Prion
Prion
•added 2021/10/22 8:15 p.m.•29 views

Cross site scripting

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

3.5CVSS5.4AI score0.00595EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/10/22 7:20 p.m.•4 views

CVE-2020-23049

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00595EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/10/22 7:20 p.m.•51 views

CVE-2020-23049

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

5.4AI score0.00595EPSS
SaveExploits1References1
CVE
CVE
•added 2021/10/22 7:20 p.m.•91 views

CVE-2020-23049

Fork CMS Content Management System v5.8.0 is affected by a cross-site scripting (XSS) vulnerability in the Displayname field when using Add, Edit, or Register. The root cause is improper encoding/input handling of the Displayname field, enabling attackers to inject and execute arbitrary web scrip...

5.4CVSS5.3AI score0.00595EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/10/22 12:00 a.m.•6 views

PT-2021-10825

Name of the Vulnerable Software and Affected Versions Fork CMS Content Management System version 5.8.0 Description A cross-site scripting XSS issue was found in the Displayname field when using the Add, Edit, or Register functions. This allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00595EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/10/22 12:00 a.m.•23 views

Fork CMS 跨站脚本漏洞

Fork CMS is an open source content management system CMS developed using PHP. The system contains blogs , questions and answers , forms and other modules . A cross-site scripting vulnerability exists in Fork CMS Content Management System version 5.8.0, which can be exploited by an attacker to...

5.4CVSS5.5AI score0.00595EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/22 12:00 a.m.•6 views

CVE-2020-23049: Improper Neutralization of Input During Web Page Generation

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS6.1AI score0.00595EPSS
SaveExploits1References2
Rows per page
Query Builder