GitHub Advisoryadvisory · Packagist

GHSA-j5fj-m342-mgcm Fork CMS Multiple XSS Vulnerabilities

MEDIUM Published 2022-05-17 Modified 2024-01-12 Official page ↗
Aliases
CVE-2012-1188
Ecosystem
Packagist
Packages
forkcms/forkcms
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2024-01-12

Affected packages

• Packagist forkcms/forkcms: < 3.2.7 → fixed in 3.2.7

Description

Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to `private/en/error` or (3) name parameter to `private/en/locale/index`.

Related

Alias · CVE (1)

  • CVE-2012-1188 Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References