Headline
GHSA-q4qv-3x58-rxmh: ForkCMS XSS via `publish_on_time` parameter
A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the publish_on_time Parameter. This issue was patched in version 5.11.0.
ForkCMS XSS via `publish_on_time` parameter
Moderate severity GitHub Reviewed Published Aug 13, 2022 • Updated Aug 18, 2022
Related news
CVE-2022-35589: Cross-site Scripting (XSS) - Generic in forkcms
A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_time" Parameter.