CVE-2022-0153

HIGH

fork-cms < 5.11.1 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.

References (2)

Core 2
Core References
Exploit, Patch, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/841503dd-311c-470a-a8ec-d4579b3274eb

Scores

CVSS v3 7.5
EPSS 0.0111
EPSS Percentile 62.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-89
Status published
Products (2)
fork-cms/fork_cms < 5.11.1
forkcms/forkcms 0 - 5.11.1Packagist
Published Mar 24, 2022
Tracked Since Feb 18, 2026