CVE-2022-35587

creationtimestamp| type| source ---|---|--- 2022-08-12 20:33:30+00:00| seen| https://t.me/cibsecurity/48096...

CVE-2022-35587

Summary: ForkCMS 5.9.3 is affected by a cross-site scripting (XSS) flaw that allows remote injection of JavaScript via the publish_on_date parameter. The issue is described across multiple sources and is attributed to the handling of the spoon library charset in Kernel.php (defineForkConstants). ...