{"id":"CVE-2020-23263","details":"Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the \"navigation_title\" parameter and the \"title\" parameter in /private/en/pages/add.","aliases":["GHSA-vp4x-94ff-2cmv"],"modified":"2026-08-18T14:11:06.379464Z","published":"2021-05-06T22:15:07.530Z","references":[{"type":"FIX","url":"https://github.com/forkcms/forkcms/pull/3093"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/forkcms/forkcms","events":[{"introduced":"77fdbd2e6b99b7d2f3114b06eb840a786fee2129"},{"last_affected":"77fdbd2e6b99b7d2f3114b06eb840a786fee2129"}],"database_specific":{"cpe":"cpe:2.3:a:fork-cms:fork_cms:5.8.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.8.2"},{"last_affected":"5.8.2"}],"source":"CPE_STRING"}}],"versions":["5.8.2"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-23263.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}