cbcvebase.
CVE-2012-5164
published 2012-09-26

CVE-2012-5164: Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term…

PriorityP416medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.22%
64.9th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.

Affected

42 ranges· showing 25
VendorProductVersion rangeFixed in
fork-cmsfork_cms<= 3.2.6—
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
fork-cmsfork_cms——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.