Description
Formwork is a flat file-based Content Management System (CMS). An attackers (requires administrator privilege) to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages (except the dashboard). This vulnerability is fixed in 1.13.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| getformwork | formwork | < 1.13.1, = 2.0.0-beta.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | getformwork/formwork | < 1.13.1 | 1.13.1 | GHSA-5pxr-7m4j-jjc6 |
| Packagist | getformwork/formwork | >= 2.0.0-beta.1, < 2.0.0-beta.2 | 2.0.0-beta.2 | GHSA-5pxr-7m4j-jjc6 |