forkcms forkcms/forkcms

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-1064unspecified – < 5.11.1SQL injection through marking blog comments on bulk as spam in forkcms/forkcmsCRITICAL 9.01.2 %
CVE-2022-0153unspecified – < 5.11.1SQL Injection in forkcms/forkcmsCRITICAL 9.61.1 %
CVE-2022-0145unspecified – < 5.11.1Cross-site Scripting (XSS) - Stored in forkcms/forkcmsMEDIUM 6.80.7 %