fork_cms vulnerabilities

CVEs whose affected-version data names the fork_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-24036High· 8.8

PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code.

PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code.

▾ Twilightfork-cms · fork_cmsEPSS 3.0%via NVD

fork_cms vulnerabilities (CVEs) · VulnSea