Forkcms Forkcms vulnerabilities

3 known vulnerabilities affecting forkcms/forkcms_forkcms.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-1064HIGHCVSS 8.8≥ unspecified, < 5.11.12022-03-25

CVE-2022-1064 [HIGH] CWE-89 CVE-2022-1064: SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms pri SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.

CVE-2022-0153HIGHCVSS 7.5≥ unspecified, < 5.11.12022-03-24

CVE-2022-0153 [HIGH] CWE-89 CVE-2022-0153: SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1. SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.

CVE-2022-0145MEDIUMCVSS 5.4≥ unspecified, < 5.11.12022-03-24

CVE-2022-0145 [MEDIUM] CWE-79 CVE-2022-0145: Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1. Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.