FluentCMS

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

FluentCMS records in CISA KEV

No FluentCMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fluentcms 2 records MEDIUM

Records

2 records in Fluentcms · all components

TI-2025-41196 CVE-2025-67349 · GHSA-v82x-ghcg-c238

A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3.

MEDIUM 60

A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00292 Published 2025-12-26 No fix listed CWE-79

TI-2025-14188 CVE-2025-15549 · GHSA-pvgm-mg5q-xc76

FluentCMS 2026 Stored XSS via SVG Upload in File Management

MEDIUM 55

FluentCMS 2026 contains a stored cross-site scripting vulnerability that allows authenticated administrators to upload SVG files with embedded JavaScript via the File Management module.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00257 Published 2026-01-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0