CVE-2018-17595: Fork-CMS Fork CMS

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

In the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were discovered via the /backend/ajax URI.

Affected products

• Fork-CMS Fork CMS: version 5.4.0 only

Published 2018-10-02. Last modified 2026-06-17.