Security Advisory

CVE-2018-20682

5.4
MEDIUM

Vulnerability Description

Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).
Published Date January 9, 2019
Official Source NIST NVD Advisory