CVE-2012-5164: Fork-CMS Fork CMS

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.

Affected products

• Fork-CMS Fork CMS: up to and including 3.2.6; version 2.0.1 only; version 2.0.2 only; version 2.1.0 only; version 2.2.0 only; version 2.3.0 only; …

Published 2012-09-26. Last modified 2026-06-16.