CVE-2012-5164

Published: Sep 26, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.

Affected (42)

Products: Fork Cms: Fork Cms

Fork Cms

1 product

Fork Cms

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Fork Cms Fork Cms	Up to 3.2.6
Fork Cms Fork Cms	Version 2.0.1
Fork Cms Fork Cms	Version 2.0.2
Fork Cms Fork Cms	Version 2.1.0
Fork Cms Fork Cms	Version 2.2.0
Fork Cms Fork Cms	Version 2.3.0
Fork Cms Fork Cms	Version 2.3.1
Fork Cms Fork Cms	Version 2.4.0
Fork Cms Fork Cms	Version 2.4.1
Fork Cms Fork Cms	Version 2.5.1
Fork Cms Fork Cms	Version 2.5.2
Fork Cms Fork Cms	Version 2.6.0
Fork Cms Fork Cms	Version 2.6.10
Fork Cms Fork Cms	Version 2.6.11
Fork Cms Fork Cms	Version 2.6.12
Fork Cms Fork Cms	Version 2.6.13
Fork Cms Fork Cms	Version 2.6.1
Fork Cms Fork Cms	Version 2.6.2
Fork Cms Fork Cms	Version 2.6.3
Fork Cms Fork Cms	Version 2.6.4
Fork Cms Fork Cms	Version 2.6.5
Fork Cms Fork Cms	Version 2.6.6
Fork Cms Fork Cms	Version 2.6.7
Fork Cms Fork Cms	Version 2.6.8
Fork Cms Fork Cms	Version 2.6.9
Fork Cms Fork Cms	Version 3.0.0
Fork Cms Fork Cms	Version 3.1.0
Fork Cms Fork Cms	Version 3.1.1
Fork Cms Fork Cms	Version 3.1.2
Fork Cms Fork Cms	Version 3.1.3
Fork Cms Fork Cms	Version 3.1.4
Fork Cms Fork Cms	Version 3.1.5
Fork Cms Fork Cms	Version 3.1.6
Fork Cms Fork Cms	Version 3.1.7
Fork Cms Fork Cms	Version 3.1.8
Fork Cms Fork Cms	Version 3.1.9
Fork Cms Fork Cms	Version 3.2.0
Fork Cms Fork Cms	Version 3.2.1
Fork Cms Fork Cms	Version 3.2.2
Fork Cms Fork Cms	Version 3.2.3
Fork Cms Fork Cms	Version 3.2.4
Fork Cms Fork Cms	Version 3.2.5