Approved changes feed: RSS · Atom
cpe:2.3:a:fork-cms:fork_cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fork Cms (b8bdb9d0-0a34-5110-adab-16eaff9522c6) |
|---|---|
| Product | Fork Cms (4acb73a3-9eb9-58fa-89ce-0d6b3320bfea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/forkcms/forkcms |
purl2cpe | 2026-06-01 10:18:22.454234 |
pkg:gitlab/kgoossens/forkcms |
purl2cpe | 2026-06-01 10:18:22.454238 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-1064 |
vulnerable | 2026-06-08 05:39:12.092458 |
SQL injection through marking blog comments on bulk as spam in forkcms/forkcms
CRITICAL (9)
SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.
Published: 2022-03-25T11:35:10.000Z
Updated: 2024-08-02T23:47:43.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0153 |
vulnerable | 2026-06-08 05:39:09.346502 |
SQL Injection in forkcms/forkcms
CRITICAL (9.6)
SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.
Published: 2022-03-24T17:05:16.000Z
Updated: 2024-08-02T23:18:41.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0145 |
vulnerable | 2026-06-08 05:39:09.336284 |
Cross-site Scripting (XSS) - Stored in forkcms/forkcms
MEDIUM (6.8)
Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.
Published: 2022-03-24T10:35:10.000Z
Updated: 2024-08-02T23:18:41.722Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24036 |
vulnerable | 2026-06-08 05:22:32.291892 |
Details available
PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code.
Published: 2021-03-04T12:28:05.000Z
Updated: 2026-07-09T00:10:54.664Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23960 |
vulnerable | 2026-06-08 05:22:32.214677 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as administrator to (1) approve the mass of the user's comments, (2) restoring a deleted user, (3) installing or running modules, (4) resetting the analytics, (5) pinging the mailmotor api, (6) uploading things to the media library, (7) exporting locale.
Published: 2021-01-11T15:54:01.000Z
Updated: 2024-08-04T15:05:11.443Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23264 |
vulnerable | 2026-06-08 05:22:31.849643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13633 |
vulnerable | 2026-06-08 05:18:00.936598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15521 |
vulnerable | 2026-06-08 05:12:57.527129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1467 |
vulnerable | 2026-06-08 05:06:25.713450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9470 |
vulnerable | 2026-06-08 05:06:11.848947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5164 |
vulnerable | 2026-06-08 05:02:54.867573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1188 |
vulnerable | 2026-06-08 05:00:48.173031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.