CVE-2014-9470

Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS before 3.8.4 allows remote attackers…

published February 8, 2020

CVSS
—
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS before 3.8.4 allows remote attackers to inject arbitrary web script or HTML via the q_widget parameter to en/search.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01421 · 72.5th percentile
Published
2020-02-08T16:03Z
EPSS history
Timeline
  • 08 FEB 16:03Z
    Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS before 3.8.4 allows remote attackers…
    cvelistv5