| Package | Affected versions | Patched versions |
|---|---|---|
| forkcms/forkcms | < 5.11.1 | 5.11.1 |
| fork cms | < 5.11.1 | 5.11.1 |
Fork CMS contains a SQL injection vulnerability in versions prior to version 5.11.1. When deleting submissions which belong to a formular (made with module FormBuilder), the parameter id[] is vulnerable to SQL injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free