Skip to content
OpenAdvisories

Package · Packagist

forkcms/forkcms

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2021-28931

    Arbitrary file upload in Fork CMS

    Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.

    forkcms/forkcms Packagist
  • High 8.8
    CVE-2020-23264

    Cross-Site Request Forgery in forkcms

    Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators.

    forkcms/forkcms Packagist
  • High 8.8
    CVE-2020-23960

    Cross-Site Request Forgery in ForkCMS

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as administrator to (1) approve the mass of the user's comments, (2) restoring a deleted user, (3) ins…

    forkcms/forkcms Packagist