A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the <head> section, allowing remote attackers to inject arbitrary script tags.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Fluentcms |
|
No data.
References
History
Wed, 31 Dec 2025 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:fluentcms:fluentcms:1.2.3:*:*:*:*:*:*:* |
Mon, 29 Dec 2025 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Fluentcms
Fluentcms fluentcms |
|
| Vendors & Products |
Fluentcms
Fluentcms fluentcms |
Fri, 26 Dec 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-79 | |
| Metrics |
cvssV3_1
|
Fri, 26 Dec 2025 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the <head> section, allowing remote attackers to inject arbitrary script tags. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2025-12-26T00:00:00.000Z
Updated: 2025-12-26T16:31:58.460Z
Reserved: 2025-12-08T00:00:00.000Z
Link: CVE-2025-67349
Vulnrichment
Updated: 2025-12-26T16:31:52.453Z
NVD
Status : Analyzed
Published: 2025-12-26T15:15:47.810
Modified: 2025-12-31T21:36:46.093
Link: CVE-2025-67349
Redhat
No data.