high8.8
CVE-2022-1064
SQL Injection in Fork CMS
Impact
Fork CMS is vulnerable to SQL injection through marking blog comments on bulk as spam in versions prior to 5.11.1.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | forkcms/forkcms | < 5.11.1 | 5.11.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fork-Cms | Fork Cms | before 5.11.1 |