Headline
GHSA-65wf-qm95-6mhm: ForkCMS XSS via `publish_on_date` parameter
A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the publish_on_date Parameter. This issue was patched in version 5.11.0.
ForkCMS XSS via `publish_on_date` parameter
Moderate severity GitHub Reviewed Published Aug 13, 2022 • Updated Aug 18, 2022
Related news
CVE-2022-35587: Cross-site Scripting (XSS) - Generic in forkcms
A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_date" Parameter