~ / search / GHSA-74gc-hf33-5353

GHSA-74gc-hf33-5353

Fork CMS Cross-site Scripting Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-13633

Packages

EcosystemPackageAffectedFixed in
Packagist forkcms/forkcms < 5.8.3 5.8.3

Details

As written in the advisory (Markdown source, shown as plain text).

Fork before 5.8.3 allows XSS via navigation_title or title.

References

External links from the advisory. They lead to third-party sites.