CVE-2012-1209

CVE-2012-1209

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/73393 https://github.com/forkcms/forkcms/commit/c8ec9c58a6b3c46cdd924532c1de99bcda6072ed https://github.com/forkcms/forkcms/commit/df75e0797a6540c4d656969a2e7df7689603b2cf http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released