| Package | Affected versions | Patched versions |
|---|---|---|
| forkcms/forkcms | < 5.11.1 | 5.11.1 |
| fork cms | < 5.11.1 | 5.11.1 |
Fork CMS prior to 5.11.1 is vulnerable to stored cross-site scripting. When uploading a new module, the description of the module can contain JavaScript code. The JavaScript code may be executed after uploading the new module and looking at the Details page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free