CVE-2012-1188
Fork CMS Multiple XSS Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
- Record
CVE-2012-1188- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
- Record
CVE-2012-1188- Updated
- 2026-11-02
EUVDEUVD-2022-4283 No score
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
- Record
EUVD-2022-4283- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j5fj-m342-mgcm No score
Fork CMS Multiple XSS Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
- Record
GHSA-j5fj-m342-mgcm- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVGHSA-j5fj-m342-mgcm No score
Fork CMS Multiple XSS Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
- Record
GHSA-j5fj-m342-mgcm- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
forkcms/forkcmsPackagist |
before 3.2.7 | 3.2.7 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Fork CMS 3.x - '/private/en/locale/index?name' Cross-Site Scripting | 2012-02-28 |
| Exploit-DB | Fork CMS 3.x - '/backend/modules/error/actions/index.php?parse()' Multiple Error Display Cross-Site Scripting Vulnerabilities | 2012-02-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1188 is a medium vulnerability (CVSS 4.3) in Fork-cms Fork Cms, published September 26, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.46%, the 91st percentile. Fixed in forkcms/forkcms 3.2.7.
References
exchange.xforce.ibmcloud.com/vulnerabilities/73605
github.com/forkcms/forkcms/commit/1269fe8b3813c7b7d5552a2b88bc2e7bd4d0c1f9
secunia.com/advisories/48183
fork-cms.com/blog/detail/fork-cms-3-2-7-released
htbridge.ch/advisory/HTB23075
archives.neohapsis.com/archives/bugtraq/2012-03/0022.html
Show 8 moreShow less
osvdb.org/79692
securityfocus.com/bid/52236
nvd.nist.gov/vuln/detail/CVE-2012-1188
web.archive.org/web/20120401204345/http://www.securityfocus.com/bid/52236