CVE-2025-67349
A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to pr…
Published: 2025-12-26 · CVSS: 6.1 · CVSS 3.1
A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the <head> section, allowing remote attackers to inject arbitrary script tags.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7