Skip to content
OpenAdvisories
Critical · 9.0 CVE-2022-1064 EUVD-2022-1536GHSA-rr8m-29g8-8cgc

SQL injection through marking blog comments on bulk as spam in forkcms/forkcms

Published Mar 25, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: forkcms Product: forkcms/forkcms Package: forkcms/forkcms Ecosystem: Packagist

Description

SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.

Affected products

VendorProductAffectedFixed
forkcms forkcms/forkcms unspecified – < 5.11.1 5.11.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist forkcms/forkcms < 5.11.1 5.11.1 GHSA-rr8m-29g8-8cgc

References