CVE-2012-1188: Fork-CMS Fork CMS

Medium severity, CVSS 4.3. EPSS: 4.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.

Affected products

• Fork-CMS Fork CMS: up to and including 3.2.6

Published 2012-09-26. Last modified 2026-06-16.