CVE-2022-1064

Description

Fork CMS is vulnerable to SQL injection through marking blog comments on bulk as spam in versions prior to 5.11.1.

Affected packages (1)

• Packagist/forkcms/forkcmsfrom 0, < 5.11.1

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-1064
• PATCHhttps://github.com/forkcms/forkcms
• WEBhttps://github.com/forkcms/forkcms/commit/6aca30e10b4181534f73f96d6e2ebeb45ec15069
• WEBhttps://huntr.dev/bounties/2f664985-c5fc-485b-b4fc-4c401be2cf40