medium5.4
CVE-2022-0145
Cross-site Scripting in Fork CMS
Impact
Fork CMS prior to 5.11.1 is vulnerable to stored cross-site scripting. When uploading a new module, the description of the module can contain JavaScript code. The JavaScript code may be executed after uploading the new module and looking at the `Details` page.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | forkcms/forkcms | < 5.11.1 | 5.11.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fork-Cms | Fork Cms | before 5.11.1 |