SQL Injection in Fork CMS

ALTO 8.8CVE-2022-1064 · GHSA-rr8m-29g8-8cgc · Published 25/03/2022 · updated 17/06/2026

Em resumo

CVE-2022-1064 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta forkcms/forkcms, fork cms (fork-cms).
Chance de exploração nos próximos 30 dias (EPSS): 1.2%, maior que 67.0% das vulnerabilidades.
Correção: atualize para 5.11.1 ou posterior.

Package	Affected versions	Patched versions
forkcms/forkcms Packagist	`< 5.11.1`	`5.11.1`
fork cms fork-cms	`< 5.11.1`	`5.11.1`

Fork CMS is vulnerable to SQL injection through marking blog comments on bulk as spam in versions prior to 5.11.1.

NVD description

SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 5.11.1

5.11.1

< 5.11.1

5.11.1

Mais vulnerabilidades de forkcms/forkcms

Ver tudo →