Cross-site Scripting (XSS)

forkcms/forkcms is vulnerable to cross-site scripting XSS. The getMovieId function in MediaItemAddMovie.php does not properly validate the invalid video ids, allowing a malicious user to inject and execute malicious javascript...