CVE-2012-1188
Last modified
CVE-2012-1188 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.. EPSS estimates a 4.46% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fork-Cms | Fork Cms | <= 3.2.6 |
References
- http://secunia.com/advisories/48183Vendor Advisory
- http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-releasedPatch, Vendor Advisory
- http://secunia.com/advisories/48183Vendor Advisory
- http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-releasedPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-1188?
How severe is CVE-2012-1188?
How do I fix CVE-2012-1188?
Are you affected by CVE-2012-1188?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
