CVE-2012-1209: Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly oth...

Security readout for executives and security teams

CVE-2012-1209 is an XSS issue in Fork CMS. A remote attacker could inject script or HTML through the highlight parameter, potentially affecting users who view a crafted page. The source bundle identifies Fork CMS 3.2.4 and possibly earlier versions before 3.2.5. Exposure is most likely on internet-accessible Fork CMS sites running version 3.2.4 or possibly other versions before 3.2.5. Systems not using Fork CMS, or already upgraded to 3.2.5 or later, are less likely to be affected based on the provided sources. Prioritize remediation for public-facing Fork CMS sites, especially admin or content-management deployments. The business risk is user-session compromise, phishing, or content manipulation through browser-executed script. This should be handled in routine web application patching unless exposure is confirmed on a critical public property. Mitigation focus: Upgrade Fork CMS deployments to version 3.2.5 or later.; Review the linked Fork CMS commits for the exact corrected code path.; Retire, isolate, or restrict access to legacy Fork CMS instances that cannot be upgraded..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.