TI-2025-41196 CVE-2025-67349 · GHSA-v82x-ghcg-c238
A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3.
Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3.
FluentCMS
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
FluentCMS records in CISA KEVNo FluentCMS vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2025-14188 CVE-2025-15549 · GHSA-pvgm-mg5q-xc76
FluentCMS 2026 Stored XSS via SVG Upload in File Management
Priority MEDIUM 55
FluentCMS 2026 contains a stored cross-site scripting vulnerability that allows authenticated administrators to upload SVG files with embedded JavaScript via the File Management module.