Known Vulnerabilities for products from Fork-cms
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Fork-cms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-64600 json | Not Provided | 2026-07-23 | 2026-07-23 | |
| CVE-2026-63801 json | Not Provided | 2026-07-19 | 2026-07-20 | |
| CVE-2026-63799 json | Not Provided | 2026-07-19 | 2026-07-20 | |
| CVE-2026-59845 json | Not Provided | 2026-07-21 | 2026-07-23 | |
| CVE-2026-58424 json | Not Provided | 2026-07-03 | 2026-07-06 | |
| CVE-2026-58370 json | Not Provided | 2026-06-30 | 2026-07-14 | |
| CVE-2026-57572 json | Not Provided | 2026-07-06 | 2026-07-08 | |
| CVE-2026-56211 json | Not Provided | 2026-06-19 | 2026-07-22 | |
| CVE-2026-55576 json | Not Provided | 2026-07-15 | 2026-07-18 | |
| CVE-2026-54037 json | Not Provided | 2026-06-25 | 2026-06-25 | |
| CVE-2022-35590 json | A cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "end_dat... | 4.8 - MEDIUM | 2022-08-12 | 2022-08-15 |
| CVE-2022-35589 json | A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on... | 4.8 - MEDIUM | 2022-08-12 | 2022-08-15 |
| CVE-2022-35587 json | A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on... | 4.8 - MEDIUM | 2022-08-12 | 2022-08-15 |
| CVE-2022-35585 json | A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "... | 4.8 - MEDIUM | 2022-08-12 | 2022-08-15 |
| CVE-2022-1064 json | SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1. | 8.8 - HIGH | 2022-03-25 | 2022-03-31 |
| CVE-2022-0153 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2022-03-24 | 2022-03-29 |
| CVE-2022-0145 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.4 - MEDIUM | 2022-03-24 | 2022-03-29 |
| CVE-2021-28931 json | Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes di... | 8.8 - HIGH | 2021-07-07 | 2021-07-12 |
| CVE-2020-24036 json | PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user t... | Not Provided | 2021-03-04 | 2026-07-09 |
| CVE-2020-23960 json | Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers ... | 8.8 - HIGH | 2021-01-11 | 2021-07-12 |