Cross-site scripting in forkcms

MÉDIO 5.4CVE-2020-23049 · GHSA-3374-7h99-xr85 · Published 22/10/2021 · updated 17/06/2026

Em resumo

CVE-2020-23049 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta forkcms/forkcms, fork cms (fork-cms).
Chance de exploração nos próximos 30 dias (EPSS): 0.60%, maior que 48.5% das vulnerabilidades.
Correção: atualize para 5.8.1 ou posterior.

Package	Affected versions	Patched versions
forkcms/forkcms Packagist	`< 5.8.1`	`5.8.1`
fork cms fork-cms	`= 5.8.0`	No fix yet

Description

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Displayname field when using the Add, Edit or `Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML.

NVD description

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `Displayname` field when using the `Add`, `Edit` or `Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML.

References

nvd.nist.gov/vuln/detail/CVE-2020-23049 · ADVISORY
forkcms/forkcms commit 6ec6171 · WEB
forkcms/forkcms · PACKAGE
vulnerability-lab.com/get_content.php · WEB

Mais vulnerabilidades de forkcms/forkcms

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

forkcms/forkcms

Packagist

< 5.8.1

5.8.1

fork cms

fork-cms

= 5.8.0

No fix yet

Description

NVD description

Mais vulnerabilidades de forkcms/forkcms

Ver tudo →