Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/08/13 12:0 a.m.35 views

ForkCMS XSS via `end_date` parameter

A cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the enddate Parameter. This issue was patched in version 5.11.0...

4.8CVSS4.9AI score0.00654EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/08/13 12:0 a.m.31 views

GHSA-PW4J-R69M-RRR5 ForkCMS XSS via `end_date` parameter

A cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the enddate Parameter. This issue was patched in version 5.11.0...

4.8CVSS4.8AI score0.00654EPSS
SaveExploits1References4
Rows per page
Query Builder