Description
A cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "end_date" Parameter
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | forkcms/forkcms | < 5.11.0 | 5.11.0 | GHSA-pw4j-r69m-rrr5 |