Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-20682

Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).