| Package | Affected versions | Patched versions |
|---|---|---|
| forkcms/forkcms | ≤ 5.0.6 | |
| fork cms | = 5.0.6 |
Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free