Headline
GHSA-9hmc-87h4-w869: ForkCMS stored XSS via `start_date` parameter
A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the start_date Parameter. This issue was patched in version 5.11.0.
ForkCMS stored XSS via `start_date` parameter
Moderate severity GitHub Reviewed Published Aug 13, 2022 • Updated Aug 18, 2022
Related news
CVE-2022-35585: Cross-site Scripting (XSS) - Stored in forkcms
A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "start_date" Parameter