CVE-2022-35589 Information

Description

A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the \publish_on_time\ Parameter.

Reference

https://huntr.dev/bounties/7-other-forkcms/