Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2018-5215

Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Fork-cms
Products
Fork Cms
CVE-2018-20682

Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Fork-cms
Products
Fork Cms
CVE-2018-17595

In the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were discovered via the /backend/ajax URI.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Fork-cms
Products
Fork Cms
CVE-2014-9470

Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS before 3.8.4 allows remote attackers to inject arbitrary web script or HTML via the q_widget parameter to en/search.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Fork-cms
Products
Fork Cms