Browse CVEs

HIGH 8.8 CVE-2022-1064 SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1. Fork Cms 5.11.1+ Fix from $1,9502022-03-25 HIGH 7.5 CVE-2022-0153 SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1. Fork Cms 5.11.1+ Fix from $1,9502022-03-24 MEDIUM 5.4 CVE-2022-0145 Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1. Fork Cms 5.11.1+ Fix from $1,6002022-03-24 MEDIUM 5.4 CVE-2020-23049 Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `Displayname` field when using … Fork Cms No fix yet Fix from $1,6002021-10-22 HIGH 8.8 CVE-2021-28931 Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zi… Fork Cms Mitigation only Fix from $1,9502021-07-07 HIGH 8.8 CVE-2020-23264 Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators. Fork Cms 5.8.2+ Fix from $1,9502021-05-06 MEDIUM 6.1 CVE-2020-23263 Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigati… Fork Cms Patch available Fix from $1,6002021-05-06 HIGH 8.8 CVE-2020-24036 PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code. Fork Cms 5.8.3+ Fix from $1,9502021-03-04 HIGH 8.8 CVE-2020-23960 Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized … Fork Cms 5.8.3+ Fix from $1,9502021-01-11 MEDIUM 6.1 CVE-2020-13633 Fork before 5.8.3 allows XSS via navigation_title or title. Fork Cms 5.8.3+ Fix from $1,6002020-05-27 MEDIUM 6.1 CVE-2014-9470 Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS before 3.8.4 allows remote… Fork Cms 3.8.4+ Fix from $1,6002020-02-08 MEDIUM 5.4 CVE-2018-20682 Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section). Fork Cms No fix yet Fix from $1,6002019-01-09 MEDIUM 6.1 CVE-2018-17595 In the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were discovered via the /backend/ajax URI. Fork Cms No fix yet Fix from $1,6002018-10-02 MEDIUM 5.4 CVE-2018-5215 Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter. Fork Cms No fix yet Fix from $1,6002018-01-04 HIGH 7.5 CVE-2015-1467 Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL commands vi… Fork Cms after 3.8.5 Fix from $1,9502015-02-06 MEDIUM 5.0 CVE-2012-1207 Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote att… Fork Cms Patch available Fix from $1,6002012-02-24