CVE-2022-1064

HIGH

fork-cms < 5.11.1 - SQL Injection via Bulk Spam Marking

Title source: llm
STIX 2.1

Description

SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.

References (2)

Core 2
Core References
Exploit, Patch, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/2f664985-c5fc-485b-b4fc-4c401be2cf40

Scores

CVSS v3 8.8
EPSS 0.0113
EPSS Percentile 62.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (2)
fork-cms/fork_cms < 5.11.1
forkcms/forkcms 0 - 5.11.1Packagist
Published Mar 25, 2022
Tracked Since Feb 18, 2026