ForkCMS XSS via `end_date` parameter

A cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the enddate Parameter. This issue was patched in version 5.11.0...