Cross-site scripting in forkcms

MEDIO 5.4CVE-2020-23049 · GHSA-3374-7h99-xr85 · Published 22/10/2021 · updated 17/06/2026

In breve

CVE-2020-23049 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda forkcms/forkcms, fork cms (fork-cms).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.60%, superiore al 48.5% delle vulnerabilità.
Correzione: aggiornare a 5.8.1 o successiva.

Package	Affected versions	Patched versions
forkcms/forkcms Packagist	`< 5.8.1`	`5.8.1`
fork cms fork-cms	`= 5.8.0`	No fix yet

Description

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Displayname field when using the Add, Edit or `Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML.

NVD description

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `Displayname` field when using the `Add`, `Edit` or `Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML.

References

nvd.nist.gov/vuln/detail/CVE-2020-23049 · ADVISORY
forkcms/forkcms commit 6ec6171 · WEB
forkcms/forkcms · PACKAGE
vulnerability-lab.com/get_content.php · WEB

Altre vulnerabilità di forkcms/forkcms

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

forkcms/forkcms

Packagist

< 5.8.1

5.8.1

fork cms

fork-cms

= 5.8.0

No fix yet

Description

NVD description

Altre vulnerabilità di forkcms/forkcms

Vedi tutto →